CVE-2025-31977

Katalog CVE

CVSS 6.5 · Medium EPSS 0,10%

Kerentanan Missing Encryption of Sensitive Data pada hcltech bigfix service management. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.

Rincian

Terbit di NVD

28 Agustus 2025

Terakhir diubah

26 September 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-311: Missing Encryption of Sensitive Data

EPSS (30 hari)

0,10% peluang dieksploitasi; lebih tinggi dari 0,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123631 advisory vendor