CVE-2025-31979
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A File Upload Validation Bypass vulnerability has been identified in HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
Risk Assessment
The ability to upload and potentially execute malicious code (e.g., a web shell) on the server can lead to remote code execution and full system compromise. This poses a serious threat to the confidentiality, integrity, and availability of the environment.
Recommendation
Apply the patches provided by HCL for BigFix SM and strengthen server-side file type validation. Consider restricting executable file uploads and monitoring for unusual upload activity.
Other vulnerabilities in HCL BigFix SM
See all- CVE-2025-31977Medium
HCL BigFix SM is affected by a cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
- CVE-2025-31972Medium
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.
Original NVD description (English source)
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS