A vulnerability classified as problematic has been found in HCL BigFix IVR 4.2. Affected is an unknown function of the component Local Setup Interface. This manipulation causes cross-site request forgery.

This vulnerability is tracked as CVE-2025-31963. The attack is possible to be carried out remotely. No exploit exists.