Description
HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Compass | 2.0, 2.1, 2.2 | — |
High · 8.1
CVE-2023-37503
EUVD-2023-41390GHSA-jvcq-3v53-v38c
A weak password requirements vulnerability affects HCL Compass
Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by HCL