HCL BigFix SM Cryptographic Weakness Vulnerability Allowing Decryption or Manipulation of Encrypted Communications

A cryptographic weakness vulnerability has been identified in HCL BigFix Service Management (SM) Version 23. This vulnerability arises from weak or outdated encryption algorithms, which an attacker with network access could exploit to decrypt or manipulate encrypted communications under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized decryption or manipulation of encrypted communications, potentially allowing an attacker to intercept or alter data being transmitted.

Remediation

Users can upgrade to HCL BigFix SM version 26.0 to address this vulnerability.