← Database

CVE-2025-31972

MEDIUM CVSS: 6.5 Published: 2025-08-28 Modified: 2026-06-17

Description

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.

Affected Platforms

Hcltech Bigfix Service Management

Weakness Type

CWE-319

References