Threats Tagged 'cve-2025-31962'
View all threats tagged with 'cve-2025-31962'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-31962'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-31962 is a vulnerability in HCL BigFix IVR version 4.2 where insufficient session expiration in the Web UI authentication component allows authenticated attackers to maintain prolonged unauthorized access to protected API endpoints. The flaw arises from excessive session expiration periods, enabling attackers with valid credentials to extend their access beyond intended limits. Although the CVSS score is low (2.0), the issue could lead to confidentiality risks if attackers exploit prolonged sessions. No known exploits are reported in the wild, and the vulnerability requires high privileges and user interaction to exploit. European organizations using HCL BigFix IVR 4.2 should review session management policies and apply any available patches or compensating controls. Countries with significant HCL BigFix deployments and critical infrastructure relying on this product are more likely to be affected. Mitigations include reducing session timeout durations, enforcing re-authentication, and monitoring session activity closely. Join the discussion | CVE Database V5 | 01/07/2026, 06:48:19 UTC Added: 01/07/2026, 07:07:03 UTC |
Showing 1 to 1 of 1 result