CVE-2025-31965 HIGH

CVE-2025-31965: HCL BigFix Remote Control is affected by an authorization bypass vulnerability

Vendor Hcl Software

Product BigFix Remote Control

Weakness CWE-305

Published July 29, 2025

Last update July 29, 2025

View on NVD All CVEs

CVSS base score

8.2/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L

What the vulnerability does

01Description

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.

Key dates

02Disclosure timeline

July 29, 2025 CVE published

July 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-31965 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/305.html

Related vulnerabilities

CVE-2025-31965: HCL BigFix Remote Control is affected by an authorization bypass vulnerability

01Description

02Disclosure timeline

03References

04Related CVE