Lucene search

[email protected]CVE-2024-23550

HistoryFeb 03, 2024 - 6:15 a.m.

CVE-2024-23550

2024-02-0306:15:48

[email protected]

web.nvd.nist.gov

hcl devops deploy

hcl launch

ucd

cve-2024-23550

vulnerability

windows agent

information disclosure

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.

Affected configurations

NVD

Node

hcltechswhcl_devops_deployMatch8.0.0.0

hcltechswhcl_launchRange7.0.0.0–7.0.5.20

hcltechswhcl_launchRange7.1.0.0–7.1.2.16

hcltechswhcl_launchRange7.2.0.0–7.2.3.9

hcltechswhcl_launchRange7.3.0.0–7.3.2.4

CPENameOperatorVersion
hcltechsw:hcl_devops_deployhcltechsw hcl devops deployeq8.0.0.0
hcltechsw:hcl_launchhcltechsw hcl launchlt7.0.5.20
hcltechsw:hcl_launchhcltechsw hcl launchlt7.1.2.16
hcltechsw:hcl_launchhcltechsw hcl launchlt7.2.3.9
hcltechsw:hcl_launchhcltechsw hcl launchlt7.3.2.4

CPE	Name	Operator	Version
hcltechsw:hcl_devops_deploy	hcltechsw hcl devops deploy	eq	8.0.0.0
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.0.5.20
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.1.2.16
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.2.3.9
hcltechsw:hcl_launch	hcltechsw hcl launch	lt	7.3.2.4

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Launch / DevOps Deploy",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "7.0 - 7.0.5.19, 7.1 - 7.1.2.15, 7.2 - 7.2.3.8, 7.3 - 7.3.2.3, 8.0.0.0"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0110334

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2024-23550

cvelist1 nvd1 prion1