CVE-2024-30151

Analyzed Analyzed - Analysis Complete

Broken Access Control in HCL BigFix Service Management

Publication date: 2026-05-06

Last updated on: 2026-05-07

Assigner: HCL Software

Description

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-06

Last Modified

2026-05-07

Generated

2026-07-06

AI Q&A

2026-05-06

EPSS Evaluated

2026-07-05

NVD

CVE-2024-30151

EUVD

EUVD-2024-28087

Affected Vendors & Products

Vendor	Product	Version / Range
hcltech	bigfix_service_management	23.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

The vulnerability in HCL BigFix Service Management (SX) is a Broken Access Control issue that leads to privilege escalation.

This means unauthorized users can bypass the intended access restrictions and gain elevated privileges within the system.

Impact Analysis

Exploitation of this vulnerability could allow unauthorized users to access sensitive data or make unauthorized modifications to the system.

This can lead to data exposure, system integrity issues, and potentially further security breaches.

Compliance Impact

The vulnerability in HCL BigFix Service Management (SX) involves Broken Access Control leading to privilege escalation, which could allow unauthorized users to gain elevated privileges and bypass access restrictions.

Such unauthorized access and potential exposure of sensitive data or unauthorized system modifications could negatively impact compliance with common standards and regulations like GDPR and HIPAA, which require strict access controls and protection of sensitive information.

Hi! I’m here to help you understand CVE-2024-30151. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70