EUVD-2026-82768
GHSA-5942-mvgr-9ghw
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Authenticated low-privileged user (PR:L) remotely reaches admin functions with no UI; C:H/I:H reflects administrative read/write, A:N as no availability impact indicated - matching vendor 8.1.
Primary rating from Vendor (hcl).
CVSS VectorVendor: hcl
Lifecycle Timeline
3DescriptionCVE.org
HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles.
AnalysisAI
Broken access control in HCL BigFix Service Management lets a low-privileged authenticated user reach administrative screens and functions reserved for higher-privileged roles, effectively escalating their privileges within the ITSM instance. Per the vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, 8.1 High), the attacker must already hold a valid standard-role account and can reach the application over the network without user interaction, obtaining full read and write capability over the exposed administrative functionality with no direct availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid authenticated session as a low-privileged user of HCL BigFix Service Management (PR:L) reachable over the network (AV:N); no user interaction is needed (UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N = 8.1 High) describes a network-reachable, low-complexity vertical privilege escalation: a low-privileged authenticated user (PR:L) reaches administrative screens and functions gated for higher roles, yielding full read (C:H) and write (I:H) over those functions but no direct availability impact (A:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix documented in HCL's advisory KB0133782 (https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782), which is the authoritative source for the specific patched build and any version-specific upgrade path; no exact fix version is available in the provided data, so the released version must be confirmed from that advisory before deployment. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all HCL BigFix Service Management instances and identify which are network-exposed; restrict access to trusted management networks or VPN, enforce least privilege by removing unnecessary high-privilege roles from standard accounts, and enable detailed logging and alerting for administrative screens and role changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
A Boolean-based SQL injection vulnerability exists in HCL Unica that allows remote attackers to manipulate backend datab
SQL injection and cross-tenant data exposure flaws in HCL BigFix Service Management allow an attacker who can reach the
Command injection in HCL BigFix RunBookAI 11.2 allows authenticated remote attackers to execute arbitrary operating syst
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.
SQL injection in HCL Aftermarket DPC version 1.0.0 enables unauthenticated remote attackers to extract sensitive databas
Content Security Policy weakness in HCL Hive Telco Observability's Keycloak authentication component allows remote attac
Missing functional level access control in HCL Aftermarket DPC version 1.0.0 enables privilege escalation attacks that c
Cross-site scripting in HCL BigFix Service Management lets an attacker who already holds a valid low-privilege account (
Hardcoded credentials in HCL Aftermarket DPC version 1.0.0 enable authenticated low-privilege attackers with user intera
Inadequate account lockout controls in HCL BigFix Service Management allow unauthenticated remote attackers to conduct s
HCL Aftermarket DPC version 1.0.0 is vulnerable to unauthenticated file discovery that allows remote attackers to read s
Unrestricted file upload in HCL BigFix Service Management lets an attacker submit a crafted file through the product's u
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today