← Back

CVE-2026-56460

nvd nist
Published: Jul 9, 2026Modified: Jul 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: psirt@hcl.com (Secondary)

Description

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected (4)

Hcltechsw
2 products
Hcl Devops Deploy
Hcl Launch
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Hcltechsw
Hcl Devops Deploy
From 8.0.0.0 to 8.0.1.14
Hcl Devops Deploy
From 8.1.0.0 to 8.1.2.7
Hcl Devops Deploy
From 8.2.0.0 to 8.2.2.0
Hcl Launch
From 7.3.0.0 to 7.3.2.19

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.