CVE-2025-52602 | HCL BigFix Query up to 4.10.x HTTP GET Endpoint exposure of private personal information to an unauthorized actor (KB0124950)

A vulnerability, which was classified as problematic, was found in HCL BigFix Query up to 4.10.x. Impacted is an unknown function of the component HTTP GET Endpoint. Executing manipulation can lead to exposure of private personal information to an unauthorized actor.

This vulnerability is registered as CVE-2025-52602. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.