CVE-2025-31976: fallo de gravedad media en HCL Software BigFix Service Management (SM)
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.8epss 0.2%
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Productos afectados
HCL Software · BigFix Service Management (SM)CVEs relacionadas — HCL Software BigFix Service Management (SM)
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-31979MEDIUMA File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)EPSS 0.2%CVE-2025-31974LOWHCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-OnlyEPSS 0.2%CVE-2025-31982LOWHCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlEPSS 0.2%CVE-2025-31959LOWHCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.EPSS 0.1%CVE-2025-31978MEDIUMHCL BigFix Service Management (SM) does not adequately sanitize or safely renderEPSS 0.1%CVE-2025-31977MEDIUMA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)EPSS 0.1%