HCL BigFix Service Management File Upload Validation Bypass Vulnerability

A file upload validation bypass vulnerability exists in HCL BigFix Service Management (SM) Version 23. The application does not properly enforce file type restrictions during the upload process, allowing attackers to bypass validation mechanisms and upload malicious or unauthorized files, such as scripts, executables, or web shells.

Impact

Exploitation of this vulnerability could lead to the upload of malicious files that could be executed on the server, potentially allowing for remote code execution or other malicious activities.

Remediation

Users can upgrade to HCL BigFix SM version 26.0 to address this vulnerability.