CVE-2025-0273

Published: Mar 27, 2025Modified: Apr 11, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.

Affected (6)

Products: Hcltechsw: Hcl Devops Deploy, Hcl Launch

2 products

Hcl Devops Deploy

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Hcltechsw Hcl Devops Deploy	From 8.0.0.0 to 8.0.1.5
Hcltechsw Hcl Devops Deploy	From 8.1.0 to 8.1.0.1
Hcltechsw Hcl Launch	From 7.0.0.0 to 7.0.5.26
Hcltechsw Hcl Launch	From 7.1.0.0 to 7.1.2.22
Hcltechsw Hcl Launch	From 7.2.0.0 to 7.2.3.15
Hcltechsw Hcl Launch	From 7.3.0.0 to 7.3.2.9

Related CWEs

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.