Vulnerability details

CVE-2025-31965

HCLSoftware BigFix Remote Control

HCL BigFix Remote Control is affected by an authorization bypass vulnerability

CVSS 3.1

8.2High

Official description

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.

CVSS scores

Score	Version	Source	Vector
8.2High	3.1	CVEProject cvelistV5 (CNA) (HCL)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L`

Affected products

Vendor	Product	Versions	Source
HCLSoftware	BigFix Remote Control	<=10.1.0.0248	CVEProject cvelistV5 (CNA)

References and advisories

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122906 x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-07-29
Last updated: 2025-07-29
State: Published
Assigner (CNA): HCL

Exploit prediction (EPSS)

0.23%

Probability of exploitation in 30 days

13.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-305
Authentication Bypass by Primary Weakness