VULNERABILITY INTELLIGENCE

CVE-2025-52602

CVSS score4.2 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-11-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

HCL BigFix Query is affected by a sensitive information disclosure in the WebUI Query application.  An HTTP GET endpoint request returns discoverable responses that may disclose: group names, active user names (or IDs).  An attacker can use that information to target individuals with phishing or other social-engineering attacks.

Weakness classification

  • psirt@hcl.com: CWE-359

Primary references