Lucene search

K
cvelistHCLCVELIST:CVE-2024-30135
HistoryJun 28, 2024 - 7:22 a.m.

CVE-2024-30135 Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10

2024-06-2807:22:28
CWE-200
HCL
www.cve.org
1
cve-2024-30135
sensitive information
dryice aex

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

9.1%

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE AEX",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "10"
      }
    ]
  }
]

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-30135