CVE-2025-31962 HCL BigFix IVR is impacted by an insufficient session expiration vulnerability
An authenticated attacker can maintain prolonged unauthorized access to protected API endpoints due to insufficient session expiration in HCL BigFix IVR.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-31962?
CVE-2025-31962 is a low-severity vulnerability in HCLSoftware BigFix IVR, published on 7 Jan 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.
Weakness: CWE-613
Which versions are affected by CVE-2025-31962?
It affects 1 product.
Products include Hcltech Bigfix Insights for Vulnerability Remediation.
How do I fix CVE-2025-31962?
No fix has been published for CVE-2025-31962 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-31962 being exploited?
There is no known exploitation of CVE-2025-31962 in the wild and no public exploit code.
Other vulnerabilities in HCLSoftware BigFix IVR
- CVE-2022-44757 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
- CVE-2022-44758 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling
- CVE-2025-31963 HCL BigFix IVR is impacted by improper authentication and missing CSRF protection
- CVE-2025-31964 HCL BigFix IVR is impacted by an improper service binding configuration
Sources
Also known as GHSA-ch77-2q3c-8f9w.