CVE-2024-23567

Published: Jul 17, 2026Modified: Jul 17, 2026Deferred

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@hcl.com (Secondary)

Description

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

Related CWEs

CWE-804

Guessable CAPTCHA

The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Source: psirt@hcl.com

Timeline

No history available yet.