CVE-2025-31959 — HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.

CVE-2025-31959

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. PUBLISHED

Description (CNA)

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Service Management (SM)	affected 23

CWE

CWE-1230

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.