CVE-2022-27551: falha de média gravidade em HCL Launch
HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.5%
HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
HCL Software · HCL LaunchCVEs relacionadas — HCL Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2022-42445MEDIUMHCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)EPSS 0.6%CVE-2022-27548MEDIUMHCL Launch is vulnerable to information disclosure which can be read by a local user.EPSS 0.5%CVE-2023-45701MEDIUMHCL Launch is susceptible to sensitive information disclosureEPSS 0.5%CVE-2023-45703MEDIUMHCL Launch is susceptible to a Denial of Service vulnerabilityEPSS 0.5%CVE-2022-42452MEDIUMCVE-2022-42452EPSS 0.3%CVE-2023-45700MEDIUMHCL Launch is susceptible to an HTML injection vulnerabilityEPSS 0.3%