Description
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | Connections | 7, 8 | — |
Low · 3.5
CVE-2023-37541
EUVD-2023-41428GHSA-jhhw-3vhx-mm3g
HCL Connections is vulnerable to broken access control
Published Jun 25, 2024 · Updated Feb 25, 2025 · Assigned by HCL