CVE-2025-31964

Katalog CVE

CVSS 4.9 · Medium EPSS 0,35%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada hcltech bigfix insights for vulnerability remediation. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.

Rincian

Terbit di NVD

7 Januari 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-419: Unprotected Primary Channel

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127753 advisory vendor