Skip to content
CVE PROGRAM SOURCE RECORD2.2 Low

CVE-2025-31964

HCL BigFix IVR is impacted by an improper service binding configuration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware BigFix IVR

Default version status: unaffected

  • 4.2affected

References