Lucene search

[email protected]CVE-2022-27551

HistoryAug 03, 2022 - 8:15 p.m.

CVE-2022-27551

2022-08-0320:15:07

CWE-863

[email protected]

web.nvd.nist.gov

cve-2022-27551

hcl launch

authenticated user

sensitive information

disclosure

improper security checking

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

Affected configurations

NVD

Node

hcltechswhcl_launchRange7.0.0.0–7.0.5.12

hcltechswhcl_launchRange7.1.0.0–7.1.2.8

hcltechswhcl_launchRange7.2.0.0–7.2.3.1

CPENameOperatorVersion
hcltechsw:hcl_launchhcltechsw hcl launchlt7.0.5.12
hcltechsw:hcl_launchhcltechsw hcl launchlt7.1.2.8
hcltechsw:hcl_launchhcltechsw hcl launchlt7.2.3.1

CPE	Name	Operator	Version
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.0.5.12
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.1.2.8
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.2.3.1

CNA Affected

[
  {
    "product": "HCL Launch",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.2.7.16, 7-7.0.5.11, 7.1-7.1.2.7; 7.2-7.2.3.0"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099732

Social References

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Related for CVE-2022-27551

nvd1 prion1 cvelist1