CVE-2024-23561: falha de média gravidade em HCL Software DevOps Deploy / Launch
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.4%
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · DevOps Deploy / LaunchCVEs relacionadas — HCL Software DevOps Deploy / Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2024-23560MEDIUMHCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type EPSS 0.3%CVE-2024-23558MEDIUMHCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logoutEPSS 0.3%CVE-2024-23559MEDIUMHCL DevOps Deploy / Launch is generating an obsolete HTTP header EPSS 0.3%CVE-2025-62329MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerabilityEPSS 0.2%