CVE-2024-30151 PUBLISHED

HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability

Assigner: HCL
Reserved: 22.03.2024 Published: 06.05.2026 Updated: 06.05.2026

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS Score: 8.3

Product Status

Vendor HCL
Product BigFix Service Management (SM)
Versions Default: unaffected
  • Version 23 is affected

References

Problem Types

  • CWE-532 Insertion of sensitive information into log file CWE