HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.6epss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected products
HCL Software · HCL Nomad for web