Orta CVSS 4.9
CVE-2025-31964: Bigfix Insights For Vulnerability Remediation: hassas bilgi ifşası
Açıklama (NVD)
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
Özet bilgiler
- Ürün
- Hcltech Bigfix Insights For Vulnerability Remediation
- CVSS v3.1
- 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| hcltech-bigfix-insights-for-vulnerability-remediation | 4.2 | 4.2 | — |