Lucene search
+L

1464 matches found

OSV
OSV
added 2024/04/15 9:15 p.m.9 views

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.8AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 9:15 p.m.11 views

CVE-2024-23561

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS5.8AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/15 9:15 p.m.24 views

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.2AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 9:0 p.m.12 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 9:0 p.m.72 views

CVE-2024-23558

The CVE-2024-23558 entry concerns HCL DevOps Deploy / HCL Launch where logout does not invalidate the user session, enabling an authenticated user to impersonate another user on the system. Connected documents confirm the issue origin as a session invalidation failure after logout, with CVSS deta...

6.3CVSS6.6AI score0.00308EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/04/15 9:0 p.m.33 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.5AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 8:20 p.m.24 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS4.7AI score0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 8:20 p.m.11 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS6.4AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/15 8:15 p.m.26 views

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS4.8AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 8:15 p.m.8 views

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 7:22 p.m.29 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS5.1AI score0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 7:22 p.m.13 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS7AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/15 6:15 p.m.7 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/15 6:15 p.m.26 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.3AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 5:31 p.m.28 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS7AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 5:31 p.m.67 views

CVE-2024-23559

CVE-2024-23559 affects HCL DevOps Deploy / Launch, where the product generates an obsolete HTTP header. The entry is supported by multiple sources (NVD, CVE records, and vendor advisories) indicating a configuration/implementation issue in the HTTP header handling, with a CVSS v3.1 base score of ...

6.1CVSS6.9AI score0.00308EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/04/15 5:31 p.m.42 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.8 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from not invalidati...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.8 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from allowing the...

6.1CVSS6.7AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.6 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from the...

4.9CVSS6.7AI score0.00324EPSS
SaveExploits0References2
Rows per page
Query Builder