CVE-2025-31965

HCL BigFix Remote Control is affected by an authorization bypass vulnerability PUBLISHED

Description (CNA)

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Remote Control	affected <=10.1.0.0248

CWE

CWE-305

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122906

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.