medium4.8
CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal appl…
Impact
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Service Management | Version 23.0 |