PT-2026-37631 · Hcl · Bigfix Service Management

Published 2026-05-06 · Updated 2026-05-06 · CVE-2025-31959

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (SM) (affected versions not specified)

Description The HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. EXIF (Exchangeable Image File Format) is a standard for storing metadata in image files, such as camera settings and GPS coordinates. This failure could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1230

Related Identifiers

CVE-2025-31959

Affected Products

Bigfix Service Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31959 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 · Vendor Advisory
• https://t.me/CVEtracker/52867 · Telegram Post
• https://twitter.com/infoflowcloud/status/2052038446919643574 · Twitter Post
• https://twitter.com/CVEnew/status/2052037435220218161 · Twitter Post