← Database

CVE-2025-31963

LOW CVSS: 2.9 Published: 2026-01-07 Modified: 2026-06-17

Description

Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.

Affected Platforms

Hcltech Bigfix Insights For Vulnerability Remediation

Weakness Type

CWE-306, CWE-352, CWE-352

References