← Database

CVE-2025-31976

MEDIUM CVSS: 4.8 Published: 2026-05-06 Modified: 2026-06-29

Description

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .

Affected Platforms

Hcltech Bigfix Service Management

Weakness Type

CWE-200, CWE-522

References