CVE-2022-42445: falha de média gravidade em HCL Launch
HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.9epss 0.6%
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
HCL Software · HCL LaunchCVEs relacionadas — HCL Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2022-27551MEDIUMHCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)EPSS 0.5%CVE-2022-27548MEDIUMHCL Launch is vulnerable to information disclosure which can be read by a local user.EPSS 0.5%CVE-2023-45701MEDIUMHCL Launch is susceptible to sensitive information disclosureEPSS 0.5%CVE-2023-45703MEDIUMHCL Launch is susceptible to a Denial of Service vulnerabilityEPSS 0.5%CVE-2022-42452MEDIUMCVE-2022-42452EPSS 0.3%CVE-2023-45700MEDIUMHCL Launch is susceptible to an HTML injection vulnerabilityEPSS 0.3%