Lucene search

China National Vulnerability DatabaseCNVD-2023-74431

HistorySep 01, 2022 - 12:00 a.m.

HCL Technologies VersionVault Express Information Disclosure Vulnerability

2022-09-0100:00:00

China National Vulnerability Database

www.cnvd.org.cn

hcl technologies

versionvault express

information disclosure

vulnerability

administrator credentials

control

device

india

comparison viewer

files

directories

2.0.1

2.1.0

cnvd

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

28.4%

JSON

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from exposing administrator credentials. An attacker can exploit the vulnerability to gain full control of the device.