Orta CVSS 4.3
CVE-2025-31962: Bigfix Insights For Vulnerability Remediation: güvenlik açığı
Açıklama (NVD)
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.
Özet bilgiler
- Ürün
- Hcltech Bigfix Insights For Vulnerability Remediation
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-613
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| hcltech-bigfix-insights-for-vulnerability-remediation | 4.2 | 4.2 | — |