CVE-2025-31964

Publication date

2026-01-07 07:18:27

Family

HCL

State

PUBLISHED

Description

Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.