HCL BigFix Service Management (SM) has an information exposure vulnerability caused by improper error handling in its reporting module. Specifically, providing an invalid or out-of-range value to the consumer_company parameter during a report-viewing request triggers an unhandled exception, potentially exposing sensitive information.