PT-2026-1582 · Hcl · Hcl Bigfix Ivr

Published 2026-01-07 · Updated 2026-01-21 · CVE-2025-31964

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HCL BigFix IVR version 4.2

Description A configuration issue with service binding in internal service components allows a privileged attacker to affect service availability. This occurs because administrative services are exposed through external network interfaces instead of the intended local authentication interface.

Recommendations Ensure proper service binding configuration for internal service components in HCL BigFix IVR version 4.2.

Fix

Information Disclosure

Weakness Enumeration

CWE-419

CWE-200

Related Identifiers

CVE-2025-31964

Affected Products

Hcl Bigfix Ivr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31964 · Security Note
• https://osv.dev/vulnerability/CVE-2025-31964 · Vendor Advisory
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127753 · Vendor Advisory
• https://twitter.com/CVEnew/status/2008807430596018454 · Twitter Post
• https://t.me/cveNotify/149483 · Telegram Post