CVE-2025-31960

Katalog CVE

CVSS 5.3 · Medium EPSS 0,24%

Kerentanan Generation of Error Message Containing Sensitive Information pada hcltech bigfix service management. Skor CVSS 3.1 5.3 (Medium) menurut hcl.com.

Deskripsi (NVD)

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

Rincian

Terbit di NVD

6 Mei 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber hcl.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 advisory vendor