CVE-2025-31982

6.5 Moyenne

Publiée le 06/05/2026 à 17:16 · Modifiée le 07/10/2026 à 11:10 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

Traduire en français

Produits concernés

HCL Software BigFix Service Management (SM)
Hcltech bigfix service management

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.7 Faible	psirt@hcl.com	`CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L`
3.1	6.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-200

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories