HCL Technologies HCL Verse Information Disclosure Vulnerability

HCL Technologies HCL Verse is a mobile application from HCL Technologies India that allows access to emails and life plan management.A security vulnerability exists in versions of HCL Technologies HCL Verse for Android prior to version 12.0.9, which stems from a server setup and login process in the application The vulnerability stems from hostname and SSL certificate validation issues during the server setup and login process, which can be exploited by attackers to spoof trusted entities through the use of a man-in-the-middle (MITM) attack.