Lucene search
HistoryDec 28, 2023 - 7:15 a.m.
CVE-2023-45701
hcl launch
remote attacker
sensitive information
exposure
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.8%
HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected configurations
Node
hcltechswhcl_launchRange7.0.0.0–7.0.5.18
ORhcltechswhcl_launchRange7.1.0.0–7.1.2.14
ORhcltechswhcl_launchRange7.2.0.0–7.2.3.7
ORhcltechswhcl_launchRange7.3.0.0–7.3.2.2
Related
cvelist
cvelist
CVE-2023-45701 HCL Launch is susceptible to sensitive information disclosure
2023-12-28 07:03:01
cve
cve
CVE-2023-45701
2023-12-28 07:15:07
prion
prion
Information disclosure
2023-12-28 07:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.8%
Related for NVD:CVE-2023-45701