HCL BigFix Service Management Directory Access Vulnerability Allowing Information Disclosure

A vulnerability exists in HCL BigFix Service Management (SM) version 23, where certain directories, although not publicly linked or visible, could be accessed directly. This issue raises the risk of unauthorized information disclosure or misuse of sensitive functionalities.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information or functionalities, increasing the risk of misuse or data breaches.

Remediation

Users can upgrade to HCL BigFix Service Management (SM) version 27 to address this vulnerability.