HCL BigFix Service Management (SM) contained directories that were not linked or publicly visible but could be accessed directly. This exposure could lead to limited information disclosure or misuse of sensitive functionality. The vulnerability has a low severity rating and a CVSS score of 3.7.