Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-31981

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware BigFix Service Management (SM)

Default version status: unaffected

  • 23affected

References