CVE-2024-30151highCWE-532

CVE-2024-30151: high-severity vulnerability in HCL BigFix Service Management (SM)

HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability

Published

Follow this CVE+ Monitor HCL BigFix Service Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.3epss 0.2%
In short

HCL BigFix Service Management has a flaw that allows unauthorized users to bypass security restrictions and gain higher privileges than they should have, potentially exposing sensitive data or making unwanted changes to the system.

Technical detail

The application lacks proper access control mechanisms, allowing attackers to escalate privileges and access resources or perform actions beyond their authorized scope. This vulnerability permits unauthorized elevation of user permissions, potentially leading to data exposure or system compromise.

Summary generated and translated by AI from the official description.
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Affected products
HCL · BigFix Service Management (SM)
Related CVEs — HCL BigFix Service Management (SM)

In the same product, most dangerous first.

CVE-2025-31960MEDIUMHCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleEPSS 0.2%CVE-2025-52613MEDIUMHCL BigFix Service Management (SM) is affected by use of a vulnerable componentEPSS 0.2%CVE-2025-31973MEDIUMHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'EPSS 0.2%CVE-2025-31975LOWHCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.EPSS 0.2%CVE-2025-31985LOWHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerEPSS 0.2%CVE-2025-31984LOWHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerEPSS 0.1%