CVE-2026-21759

Published: Aug 24, 2026Modified: Aug 28, 2026Deferred

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@hcl.com (Secondary)

Description

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

Related CWEs

CWE-215

Insertion of Sensitive Information Into Debugging Code

The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731

Source: psirt@hcl.com

Timeline

No history available yet.