HCL Launch

11 results · Feed

• Medium 6.2
  CVE-2023-45702

  HCL Launch Agent as a Windows service is vulnerable to a Denial of Service

  An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..

  HCL Software HCL Launch
  Dec 28, 2023
• Medium 4.3
  CVE-2023-45701

  HCL Launch is susceptible to sensitive information disclosure

  HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

  HCL Software HCL Launch
  Dec 28, 2023
• Medium 4.3
  CVE-2023-45700

  HCL Launch is susceptible to an HTML injection vulnerability

  HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

  HCL Software HCL Launch
  Dec 21, 2023
• Medium 5.3
  CVE-2023-45703

  HCL Launch is susceptible to a Denial of Service vulnerability

  HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.

  HCL Software HCL Launch
  Dec 20, 2023
• Medium 5.1
  CVE-2023-23348

  HCL Launch is vulnerable to sensitive information disclosure

  HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

  HCL Software HCL Launch
  Jul 10, 2023
• Medium 4.6
  CVE-2022-42452

  HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to…

  HCL Software HCL Launch
  Mar 30, 2023
• Medium 4.9
  CVE-2022-42445

  HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)

  HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.

  HCL Software HCL Launch
  Nov 28, 2022
• Medium 5.9
  CVE-2021-27784

  HCL Launch container images may contain non-unique https certificates and database encryption key

  The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.

  HCL Software HCL Launch
  Oct 31, 2022
• Medium 5.3
  CVE-2022-27551

  HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)

  HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

  HCL Software HCL Launch
  Aug 3, 2022
• Medium 4.0
  CVE-2022-27549

  HCL Launch could disclose sensitive database information to a local user in plain text.

  HCL Launch may store certain data for recurring activities in a plain text format.

  HCL Software HCL Launch
  Jul 6, 2022
• Medium 4.9
  CVE-2022-27548

  HCL Launch is vulnerable to information disclosure which can be read by a local user.

  HCL Launch stores user credentials in plain clear text which can be read by a local user.

  HCL Software HCL Launch
  Jul 6, 2022