CVE-2024-30151

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sensitive data or unauthorized system modifications

• CWE-532

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127782Vendor Advisory

Published

May 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30146Improper access control of endpoint in HCL Domino Leap allow…2.7
• CVE-2024-30147Multiple vectors in HCL Leap allow client-side script inject…6.1
• CVE-2024-30148Improper access control of endpoint in HCL Leap allows certa…4.1
• CVE-2024-30149HCL AppScan Source <= 10.6.0 does not properly validate a TL…6.5
• CVE-2024-3015A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2024-30150HCL MyCloud is affected by Improper Access Control - an unau…9.1
• CVE-2024-30152HCL SX v21 is affected by usage of a weak cryptographic algo…9.8
• CVE-2024-30154HCL SX is vulnerable to cross-site request forgery vulnerabi…5.7
• CVE-2024-30155HCL SX does not set the secure attribute on authorization to…4.3
• CVE-2024-30156Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and befor…7.5
• CVE-2024-30157A vulnerability in the Suite Applications Services component…7.2
• CVE-2024-30158A vulnerability in the web conferencing component of Mitel M…7.2