CVE-2023-37541

Published: Jun 25, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

Affected (11)

Products: Hcltech: Connections

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Hcltech Connections	Version 7.0
Hcltech Connections	Version 8.0
Hcltech Connections	Version 8.0 cumulative_release1
Hcltech Connections	Version 8.0 cumulative_release2
Hcltech Connections	Version 8.0 cumulative_release3
Hcltech Connections	Version 8.0 cumulative_release4
Hcltech Connections	Version 8.0 cumulative_release5
Hcltech Connections	Version 8.0 cumulative_release6
Hcltech Connections	Version 8.0 cumulative_release7
Hcltech Connections	Version 8.0 cumulative_release8
Hcltech Connections	Version 8.0 cumulative_release9

References (2)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119435

Source: psirt@hcl.com

Vendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114156

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.