PT-2025-35109 · Hcl · Hcl Bigfix Sm

Published 2025-08-28 · Updated 2025-08-28 · CVE-2025-31979

Positive Technologies · (AI Summary)

CVSS v3.1

5.4

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions:

HCL BigFix SM (affected versions not specified)

Description:

A File Upload Validation Bypass flaw exists in HCL BigFix SM, where the application does not properly enforce file type restrictions during the upload process. This allows an attacker to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing validation mechanisms.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-31979

Affected Products

Hcl Bigfix Sm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31979 · Security Note
• https://twitter.com/VulmonFeeds/status/1961208339997638916 · Twitter Post
• https://twitter.com/CVEnew/status/1961123069399109757 · Twitter Post
• https://t.me/CVEtracker/31139 · Telegram Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123631 · Note