Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-30151: HCL BigFix SX: Unauthorized Users Can Gain Elevated Privileges

CVE-2024-30151 · published 6 months ago

Summary

The HCL BigFix Service Management (SX) software has a security weakness that allows unauthorized users to access sensitive data or make unauthorized changes to the system. This is a concern because it could lead to data breaches or system damage. IT administrators should review and update their configurations to ensure proper access controls are in place to prevent this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
hcltech	bigfix_service_management	23.0 `cpe:2.3:a:hcltech:bigfix_service_management:23.0:::::::*`

Original advisory text

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing ...

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127782 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.3 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-532Insertion of Sensitive Information into Log File

Timeline

Published6 May 2026

Updated4 Nov 2026

First seen7 May 2026

Sources

CVE-2024-30151 · NVD

Track software like this

Free during beta