low2.2
CVE-2025-31964
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability…
Impact
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Insights For Vulnerability Remediation | Version 4.2 |