File Upload Bypass in HCL BigFix SM

CVE-2025-31979

What is CVE-2025-31979?

A vulnerability has been detected in HCL BigFix SM where insufficient file type validation may allow an attacker to upload harmful files, including scripts or web shells. This weakness results from the application's failure to properly enforce upload restrictions, enabling potential exploitation through both client-side and server-side mechanisms. Organizations using this product should implement immediate mitigations to prevent unauthorized file uploads and safeguard their systems.

References