Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2025-31962

HCL BigFix IVR is impacted by an insufficient session expiration vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware BigFix IVR

Default version status: unaffected

  • 4.2affected

References