← Back

CVE-2023-45701

nvd nist
Published: Dec 28, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected (4)

Hcltechsw
1 product
Hcl Launch
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Hcltechsw
Hcl Launch
From 7.0.0.0 to 7.0.5.18
Hcl Launch
From 7.1.0.0 to 7.1.2.14
Hcl Launch
From 7.2.0.0 to 7.2.3.7
Hcl Launch
From 7.3.0.0 to 7.3.2.2

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (2)

Source: psirt@hcl.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.