HCL BigFix Service Management (SM) is vulnerable to an Information Disclosure by exposing server banner data. The banner reveals software versions and system details, which can provide an attacker useful context for targeting other known weaknesses. The weakness is classified as CWE-200. The CVSS score of 2.6 reflects a low severity but the vulnerability still compromises confidentiality of system information.

Theffected product is HCL BigFix Service Management (SM). No specific impacted versions are listed, so all installations of the product should be considered potentially affected.

The low CVSS score indicates limited impact if the flaw is exploited. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not currently widely exploited. Attackers would typically reach the vulnerable server over the network and obtain the banner during initial connection, using the disclosed details for further reconnaissance or to plan further attacks.