Skip to content
OpenAdvisories
High · 7.8 CVE-2023-37537 EUVD-2023-41424GHSA-2hmc-82rg-26hv

HCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability

Published Oct 17, 2023 · Updated Sep 13, 2024 · Assigned by HCL

Description

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC), may allow a local attacker to gain elevated privileges.

Affected products

VendorProductAffectedFixed
HCL Software HCL AppScan Presence <=2.1.37 —

References