{"id":"CVE-2026-108018","published":"2026-11-06T09:16:59.527","lastModified":"2026-11-06T09:16:59.527","description":"The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction.  A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts.","cvssScore":6.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N","cwes":["CWE-497"],"vendors":[],"products":[],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135001","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}