Lucene search

[email protected]CVE-2023-45701

HistoryDec 28, 2023 - 7:15 a.m.

CVE-2023-45701

2023-12-2807:15:07

CWE-209

[email protected]

web.nvd.nist.gov

cve

hcl launch

remote attacker

sensitive information

browser

technical error message

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.0%

JSON

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

CPENameOperatorVersion
hcltechsw:hcl_launchhcltechsw hcl launchle7.0.5.18
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.13
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.11
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.15
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.0.0
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.12
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.10
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.0
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.18
hcltechsw:hcl_launchhcltechsw hcl launcheq7.0.5.14

CPE	Name	Operator	Version
hcltechsw:hcl_launch	hcltechsw hcl launch	le	7.0.5.18
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.13
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.11
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.15
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.0.0
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.12
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.10
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.0
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.18
hcltechsw:hcl_launch	hcltechsw hcl launch	eq	7.0.5.14

Rows per page:

1-10 of 331

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108645

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.0%

JSON

Related for CVE-2023-45701

cvelist1 prion1