← Back

CVE-2025-31974

nvd nist
Published: May 6, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system components, potentially increasing the risk of system compromise or unauthorized changes.

Affected (1)

Hcltech
1 product
Bigfix Service Management
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bigfix Service Management
Version 23.0

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.