HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS’s HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-52621 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious request that includes a manipulated Origin header. By leveraging the unvalidated reflection of this header in the HTTP response, the attacker could potentially poison the cache, leading to unauthorized access or data manipulation.
Affected Products
- HCL BigFix SaaS: A cloud-based service for endpoint management that is susceptible to cache poisoning due to improper handling of the Origin header.
Mitigation
To mitigate this vulnerability, it is recommended to validate and sanitize the Origin header in HTTP responses to prevent cache poisoning. Additionally, implementing security measures such as web application firewalls can help detect and block malicious requests.