Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-45701 EUVD-2023-49990GHSA-v2pm-g2fx-6m9c

HCL Launch is susceptible to sensitive information disclosure

Published Dec 28, 2023 · Updated Aug 2, 2024 · Assigned by HCL

Description

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
HCL Software HCL Launch 7.0 - 7.0.5.18, 7.1 - 7.1.2.14, 7.2 - 7.2.3.7, 7.3 - 7.3.2.2 —

References