Lucene search

China National Vulnerability DatabaseCNVD-2023-74431

HistorySep 01, 2022 - 12:00 a.m.

HCL Technologies VersionVault Express Information Disclosure Vulnerability

2022-09-0100:00:00

China National Vulnerability Database

www.cnvd.org.cn

hcl technologies

versionvault express

information disclosure

vulnerability

administrator credentials

control

device

india

comparison viewer

files

directories

2.0.1

2.1.0

cnvd

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

JSON

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from exposing administrator credentials. An attacker can exploit the vulnerability to gain full control of the device.

CPENameOperatorVersion
hcl technologies versionvault expresseq2.0.1
hcl technologies versionvault expresseq2.1.0

CPE	Name	Operator	Version
	hcl technologies versionvault express	eq	2.0.1
	hcl technologies versionvault express	eq	2.1.0