CVE 6.5 MEDIUM

HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability_CVE-2025-31972

6.5 / 10
MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.

Basic Information

ID CVE-2025-31972
Source HCL
Published Aug 28, 2025 at 16:50
Modified Aug 28, 2025 at 17:14

Affected Product

Vendor HCL Software
Product BigFix Service Management (SM)
Version 23
Affected Versions HCL Software BigFix Service Management (SM) 23

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.