PT-2026-1575 · Hcl · Hcl Bigfix Ivr

Publicado 2026-01-07 · Atualizado 2026-01-07 · CVE-2025-31962

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL BigFix IVR version 4.2

Description The Web UI authentication component suffers from insufficient session expiration. This allows an authenticated attacker to maintain unauthorized access to protected API endpoints for an extended duration due to overly long expiration periods.

Recommendations Update to a newer version that addresses the session expiration issue.

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

CVE-2025-31962

Produtos afetados

Hcl Bigfix Ivr

Referências · 4

• https://osv.dev/vulnerability/CVE-2025-31962 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008801725172641805 · Publicação no Twitter
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127753 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-31962 · Nota de Segurança