Information Disclosure Vulnerability in HCL BigFix Service Management

CVE-2025-31982

What is CVE-2025-31982?

The HCL BigFix Service Management is susceptible to a vulnerability where directories, although not linked or publicly visible, are accessible through direct access. This can potentially lead to the unauthorized disclosure of sensitive information or misappropriation of critical functionalities, thereby raising significant security concerns. Organizations using this product should assess their exposure and implement necessary measures to secure their sensitive data.

References