HCL BigFix Service Management Discovery Unenforced Encryption Vulnerability
Vulnerability
A vulnerability allowing unenforced encryption has been identified in HCL BigFix Service Management (SM) Discovery, version 23. The issue arises because port 80 (HTTP) is open, permitting unencrypted access. This configuration allows an attacker with access to the network traffic to intercept packets and potentially uncover sensitive data.
Impact
Exploitation of this vulnerability could lead to unauthorized interception of unencrypted data transmitted over the network.
Remediation
Users are advised to upgrade to HCL BigFix Service Management Version 27.
Added: Apr 21, 2026, 4:15 PM
Updated: Apr 21, 2026, 4:15 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.0remediation
0.0relevance
6.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.