PT-2026-1575 · Hcl · Hcl Bigfix Ivr

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-31962

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL BigFix IVR version 4.2

Description The Web UI authentication component suffers from insufficient session expiration. This allows an authenticated attacker to maintain unauthorized access to protected API endpoints for an extended duration due to overly long expiration periods.

Recommendations Update to a newer version that addresses the session expiration issue.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-31962

Affected Products

Hcl Bigfix Ivr

References · 4

• https://osv.dev/vulnerability/CVE-2025-31962 · Vendor Advisory
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127753 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31962 · Security Note
• https://twitter.com/CVEnew/status/2008801725172641805 · Twitter Post