CVE-2026-56597 PUBLISHED

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Assigner: HCL
Reserved: 22.06.2026 Published: 18.09.2026 Updated: 18.09.2026

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 3.1

Product Status

Vendor HCL Software
Product HCL BigFix Service Management
Versions Default: unaffected
  • Version v27 is affected

References

Problem Types

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor CWE