CVE-2025-31964 — HCL BigFix IVR is impacted by an improper service binding configuration
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of a…
Published: 2026-01-07 · CVSS: 2.2 · CVSS 3.1
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7