Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)
Vulnerability Description
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
HCL BigFix SM 安全漏洞
Vulnerability Description
HCL BigFix SM是印度HCL公司的一款AI驱动的服务管理平台模块。 HCL BigFix SM存在安全漏洞，该漏洞源于文件上传验证绕过，可能导致上传恶意文件。
CVSS Information
N/A
Vulnerability Type
N/A