HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-52619 |
Exploitation
To exploit this vulnerability, an attacker could trigger specific error conditions in the HCL BigFix SaaS Authentication Service, which would then reveal sensitive version information through the error messages. This information could potentially be used to craft further attacks against the system.
Affected Products
- HCL BigFix SaaS Authentication Service: This service is vulnerable to information disclosure under certain error conditions, which may expose sensitive version details.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper error handling mechanisms that do not disclose sensitive information in error messages. Regular updates and patches from HCL Software should also be applied to ensure the system is protected against known vulnerabilities.