CVE-2021-27784

Published: Oct 31, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.

Affected (5)

Products: Hcltech: Hcl Launch Container Image

Hcltech

1 product

Hcl Launch Container Image

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hcltech Hcl Launch Container Image	From 7.0.0.0 to 7.0.52
Hcltech Hcl Launch Container Image	From 7.1.0.0 to 7.1.0.1
Hcltech Hcl Launch Container Image	From 7.2.0.0 to 7.2.3.0
Hcltech Hcl Launch Container Image	Version 7.1.0.1
Hcltech Hcl Launch Container Image	Version 7.1.0.1 ifix01

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101093

Source: psirt@hcl.com

Vendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101093

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.