CVE-2025-31982

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-05-06

Last modified

2026-10-07

Weaknesses

CWE-200

Affected products

• Bigfix Service Management Sm (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144