HCL BigFix Platform is affected by insufficient authentication, allowing users to reach sensitive areas of the application without proper credentials. The flaw enables unauthorized disclosure, modification, or impersonation of privileged data or functions, representing an authentication bypass weakness (CWE-306).

The affected product is the HCLSoftware BigFix Platform. No specific versions were listed in the data; the vulnerability is reported as a general issue affecting the platform in its current deployments until corrected by a vendor update.

The CVSS score of 4.0 indicates a moderate risk. While the exploitability score (EPSS) is not available, the weakness implies that an attacker can misuse web interfaces or internal application calls to impersonate users, as inferred from the description. The vulnerability is not listed in CISA’s KEV catalog, but because it permits unauthorized access, it should be considered a medium to high priority by security teams.