CVE-2025-31972 — HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability

CVE-2025-31972

HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability PUBLISHED

Description (CNA)

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Service Management (SM)	affected 23

CWE

CWE-319

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123631

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.