HCL BigFix SM Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing sensitive information exposure exists in HCL BigFix Service Management (SM) Version 23. Internal connections lack TLS encryption, potentially allowing unauthorized access to sensitive data transmitted between internal components.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive data being transmitted between internal components of HCL BigFix SM.
Remediation
Users can upgrade to HCL BigFix SM version 26.0 to address this vulnerability.
Added: Aug 28, 2025, 5:26 PM
Updated: Aug 28, 2025, 5:26 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.5remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.