← Back

CVE-2025-0279

nvd nist
Published: Apr 3, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: psirt@hcl.com (Secondary)

Description

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.

Affected (1)

Products: Hcltech: Traveler
Hcltech
1 product
Traveler
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Traveler
Up to 14.0.0.1

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.