CVE-2025-31962 — HCL BigFix IVR is impacted by an insufficient session expiration vulnerability
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to pr…
Published: 2026-01-07 · CVSS: 2.0 · CVSS 3.1
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7