HCL BigFix IVR Session Management Vulnerability Allowing Prolonged Unauthorized Access

A vulnerability exists in the Web UI authentication component of HCL BigFix IVR version 4.2, where insufficient session expiration allows an authenticated attacker to maintain unauthorized access to protected API endpoints. This issue arises from excessively long expiration periods for sessions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to protected API endpoints, allowing attackers to interact with these endpoints as if they were authorized users.

Remediation

Users are advised to upgrade to HCL BigFix IVR version 4.2.1.0 or later. Instructions for upgrading are available in the BigFix Console under the 'Fixlets and Tasks' node.