HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124512