Unencrypted Access Vulnerability in HCL BigFix Service Management

CVE-2025-31981

What is CVE-2025-31981?

HCL BigFix Service Management is vulnerable to a significant security risk due to the absence of enforced encryption on port 80 (HTTP). This open port allows attackers to intercept unencrypted data transmitted over the network, enabling potential data exposure through packet sniffing techniques. Without adequate encryption protocols, sensitive information can be compromised, making it crucial for organizations to address this vulnerability to ensure data integrity and security.

References