HCL BigFix Service Management (SM) has a security misconfiguration involving a missing or insecure "X-Content-Type-Options" header. This misconfiguration may allow browsers to perform MIME-type sniffing, which could lead to the incorrect interpretation and execution of malicious content. The vulnerability has a low severity rating with a CVSS score of 3.7.