Privilege Escalation in HCL BigFix Service Management

CVE-2024-30151

What is CVE-2024-30151?

HCL BigFix Service Management (SX) is vulnerable to a broken access control flaw that allows unauthorized users to escalate their privileges. This vulnerability may enable attackers to bypass intended access restrictions, potentially leading to unauthorized modifications of system settings and exposure of sensitive information. Organizations using this product should implement necessary security measures to mitigate the risks associated with this vulnerability.

References