The BigFix MCM admin portal is accessible directly from the internet without VPN or network restrictions. A client-side configuration file is publicly exposed, revealing non-sensitive environment details. This exposure increases the attack surface and the risk of unauthorized access attempts.