Lucene search
+L

1635 matches found

CNVD
CNVD
•added 2024/04/16 12:00 a.m.•59 views

IBM DevOps Deploy and IBM UrbanCode Deploy Access Control Error Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different...

4.4CVSS6.6AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/15 9:15 p.m.•28 views

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.2AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/15 9:15 p.m.•18 views

CVE-2024-23561

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS5.8AI score0.0036EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/15 9:15 p.m.•18 views

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 9:00 p.m.•15 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/15 9:00 p.m.•90 views

CVE-2024-23558

The CVE-2024-23558 entry concerns HCL DevOps Deploy / HCL Launch where logout does not invalidate the user session, enabling an authenticated user to impersonate another user on the system. Connected documents confirm the issue origin as a session invalidation failure after logout, with CVSS deta...

6.3CVSS6.6AI score0.00308EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2024/04/15 9:00 p.m.•41 views

CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS6.5AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 8:20 p.m.•35 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS4.7AI score0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 8:20 p.m.•15 views

CVE-2024-23561 HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values...

4.3CVSS6.4AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/15 8:15 p.m.•34 views

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS4.8AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/15 8:15 p.m.•17 views

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 7:22 p.m.•37 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS5.1AI score0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 7:22 p.m.•16 views

CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type...

4.4CVSS7AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/15 6:15 p.m.•32 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.3AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/15 6:15 p.m.•14 views

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/15 5:31 p.m.•76 views

CVE-2024-23559

CVE-2024-23559 affects HCL DevOps Deploy / Launch, where the product generates an obsolete HTTP header. The entry is supported by multiple sources (NVD, CVE records, and vendor advisories) indicating a configuration/implementation issue in the HTTP header handling, with a CVSS v3.1 base score of ...

6.1CVSS6.9AI score0.00308EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2024/04/15 5:31 p.m.•31 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS7AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 5:31 p.m.•50 views

CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header

HCL DevOps Deploy / Launch is generating an obsolete HTTP header...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•14 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from allowing the...

6.1CVSS6.7AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•16 views

HCL Technologies HCL Launch 安全漏洞

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. It is used to handle the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch that stems from not invalidati...

6.3CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder