← Back

CVE-2026-56569

nvd nist
Published: Jul 31, 2026Modified: Aug 5, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.

Affected (1)

Products: Hcltech: Icontrol
Hcltech
1 product
Icontrol
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Icontrol
Version 4.3.0

Related CWEs

CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.