File Upload Bypass in HCL BigFix SM
CVE-2025-31979

5.4MEDIUM

Key Information:

Vendor

HCL Software Software

Status
Bigfix Service Management (sm)
Vendor
CVE Published:
28 August 2025

What is CVE-2025-31979?

A vulnerability has been detected in HCL BigFix SM where insufficient file type validation may allow an attacker to upload harmful files, including scripts or web shells. This weakness results from the application's failure to properly enforce upload restrictions, enabling potential exploitation through both client-side and server-side mechanisms. Organizations using this product should implement immediate mitigations to prevent unauthorized file uploads and safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BigFix Service Management (SM) 23

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.