HCL BigFix Remote Control Server WebUI Content Security Policy Bypass Vulnerability

A vulnerability exists in HCL BigFix Remote Control Server WebUI in versions through 10.1.0.0442. The issue arises from a misconfigured Content Security Policy (CSP) that fails to establish directives without fallbacks. This flaw enables attackers to circumvent intended security measures and load unauthorized resources.

Impact

Exploitation of this vulnerability allows for bypassing of security restrictions, potentially leading to the loading of unauthorized resources.

Remediation

Users can upgrade to HCL BigFix Remote Control Remote Control 10.1 Fix Pack 5 to address this vulnerability.