CVE-2025-52621CWE-346

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning

Medium · published August 15, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.1th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2025-08-15T22:45Z
EPSS history
Timeline
  • 15 AUG 22:45Z
    HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
    cvelistv5