EUVD-2026-18096
GHSA-69rx-rvq8-835f
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
3DescriptionCVE.org
HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication.
AnalysisAI
HCL BigFix Platform allows local attackers to bypass authentication and access sensitive application areas without credentials, affecting confidentiality of data. The vulnerability requires local access but no privileges or user interaction, and is classified as a moderate-risk authentication bypass (CVSS 4.0) with limited technical complexity. Patches are available through HCL vendor advisories.
Technical ContextAI
The vulnerability stems from insufficient authentication controls (CWE-306) in HCL BigFix Platform, a systems management and patch management solution. The root cause is inadequate verification of user identity before granting access to sensitive application functions or data. The local attack vector (AV:L) indicates the attacker must have some form of local system access, but the low complexity (AC:L) and no privilege requirement (PR:N) suggest the authentication bypass can be triggered through straightforward means without exploiting additional system vulnerabilities or requiring special technical conditions. This represents a failure in access control implementation rather than a cryptographic or protocol-level flaw.
RemediationAI
The primary remediation is to apply the vendor-released patch from HCL. Refer to HCL support article KB0129906 (https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906) for the exact patched version and deployment instructions specific to your BigFix Platform installation. In the interim, restrict local system access to the BigFix Platform infrastructure to trusted administrators only, implement strong access controls at the operating system level, and monitor access logs for unauthorized attempts to sensitive application areas. Coordinate patching with HCL support if version compatibility or deployment constraints exist in your environment.
More in Bigfix Platform
View allIBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root pr
IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free ra
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default
IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute f
IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the upd
IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicio
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (R
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute mal
IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed wit
IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. Rated high severity (CVSS 7.8), thi
In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-d
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today