CVE-2025-31976 — HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials

CVE-2025-31976

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials PUBLISHED

Description (CNA)

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Service Management (SM)	affected 23

CWE

CWE-200

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.