Description
HCL Launch stores user credentials in plain clear text which can be read by a local user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Launch | 7.2.2.1, 7.1.2.6, 7.0.5.10 | — |
Medium · 4.9
CVE-2022-27548
EUVD-2022-32049GHSA-528h-92p5-h95c
HCL Launch is vulnerable to information disclosure which can be read by a local user.
Published Jul 6, 2022 · Updated Sep 16, 2024 · Assigned by HCL