PT-2026-1582 · Hcl · Hcl Bigfix Ivr

CVE-2025-31964 · Publicado 2026-01-07 · Atualizado 2026-01-21

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HCL BigFix IVR version 4.2

Description A configuration issue with service binding in internal service components allows a privileged attacker to affect service availability. This occurs because administrative services are exposed through external network interfaces instead of the intended local authentication interface.

Recommendations Ensure proper service binding configuration for internal service components in HCL BigFix IVR version 4.2.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-419

CWE-200

Identificadores relacionados

CVE-2025-31964

Produtos afetados

Hcl Bigfix Ivr

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31964 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-31964 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008807430596018454 · Publicação no Twitter
• https://t.me/cveNotify/149483 · Publicação no Telegram
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127753 · Aviso do Fabricante