PT-2026-1576 · Hcl · Hcl Bigfix Ivr
CVE-2025-31963
·
Publicado
2026-01-07
·
Atualizado
2026-01-22
CVSS v3.1
3.3
Baixa
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
HCL BigFix IVR version 4.2
Description
The local setup interface component suffers from improper authentication and a lack of CSRF protection. This allows a local attacker to make unauthorized configuration changes by sending unauthenticated administrative configuration requests.
Recommendations
Apply updates to address the authentication and CSRF protection issues in the local setup interface component.
Correção
CSRF
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hcl Bigfix Ivr