Skip to content
OpenAdvisories
Medium WID-SEC-2026-1186 2 CVEs

HCL BigFix: Mehrere Schwachstellen

Published Apr 20, 2026 · Updated Apr 21, 2026 · Revision 2 · de-DE

Vendor: HCL Software Product: BigFix Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-31981

    HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

    HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data.

    HCL Software BigFix Service Management (SM)
  • Low 3.7
    CVE-2025-31958

    HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling

    HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request pars…

    HCL Software BigFix Service Management (SM)

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-209542, EUVD-2025-209541

  2. #1

    Initiale Fassung

References