Information Disclosure Vulnerability in HCL BigFix Service Management

CVE-2025-31975

What is CVE-2025-31975?

HCL BigFix Service Management is susceptible to an Information Disclosure vulnerability caused by improperly configured server banners. This weakness allows unauthorized users to view sensitive software version information and system details, potentially enabling them to exploit known vulnerabilities in the application. Organizations using BigFix SM should address this vulnerability by implementing the necessary security patches and configuration changes to protect their systems.

References