Vulnerability · Published May 6, 2026 · Assigned by HCL
CVE-2024-30151HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability
High 8.3
In plain English
A high-severity sensitive data in logs in BigFix Service Management (SM) from HCL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.2%top 83.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL | BigFix Service Management (SM) | 23 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L