Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-31965

HCL BigFix Remote Control is affected by an authorization bypass vulnerability

Description

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Remote Control

Default version status: unaffected

  • <=10.1.0.0248affected

References