Low WID-SEC-2025-0564 1 CVE

HCL AppScan Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 13, 2025 · Updated Mar 13, 2025 · de-DE

Vendor: HCL Software Product: AppScan Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in HCL AppScan Enterprise ausnutzen, um Informationen offenzulegen.

Product

AppScan ist eine Lösung zum Testen und Dokumentieren von Webanwendungsschwachstellen.

Vulnerabilities 1

Medium 4.3

CVE-2024-30143

A path traversal vulnerability in HCL AppScan Traffic Recorder

HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the …

HCL Software HCL AppScan Traffic Recorder

Mar 13, 2025

Revision history

2025-03-13 #1
Initiale Fassung

References

HCL Security Bulletin vom 2025-03-13
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117697