HCL BigFix Service Management Privilege Escalation Vulnerability

A Broken Access Control vulnerability has been identified in HCL BigFix Service Management (SX) Version 23, allowing unauthorized users to escalate privileges and bypass access restrictions. This vulnerability could lead to the exposure of sensitive data or unauthorized modifications to the system.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing users to gain elevated rights and access restricted functionalities within the application.

Remediation

HCL has developed a new microservice to implement Role-Based Access Control (RBAC) throughout the product, addressing the broken access control vulnerability. This fix will be available in version 27.