CVE-2022-27549: falha de média gravidade em HCL Launch
HCL Launch could disclose sensitive database information to a local user in plain text.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4epss 0.2%
HCL Launch may store certain data for recurring activities in a plain text format.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · HCL LaunchCVEs relacionadas — HCL Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2022-42445MEDIUMHCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)EPSS 0.6%CVE-2022-27551MEDIUMHCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)EPSS 0.5%CVE-2022-27548MEDIUMHCL Launch is vulnerable to information disclosure which can be read by a local user.EPSS 0.5%CVE-2023-45701MEDIUMHCL Launch is susceptible to sensitive information disclosureEPSS 0.5%CVE-2023-45703MEDIUMHCL Launch is susceptible to a Denial of Service vulnerabilityEPSS 0.5%CVE-2022-42452MEDIUMCVE-2022-42452EPSS 0.3%