Vulnerabilities > CVE-2021-27782 - Improper Restriction of Excessive Authentication Attempts vulnerability in Hcltech Bigfix Mobile 2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |