PT-2026-38084 · Hcl · Bigfix Service Management

Published 2026-05-06 · Updated 2026-05-06 · CVE-2024-30151

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (SX) (affected versions not specified)

Description A broken access control issue allows unauthorized users to bypass intended restrictions and achieve privilege escalation. This could lead to unauthorized system modifications or the exposure of sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-30151

Affected Products

Bigfix Service Management

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-30151 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127782 · Vendor Advisory
• https://twitter.com/CVEnew/status/2052112624402203089 · Twitter Post