Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-23560 EUVD-2024-21055GHSA-pfh7-q24c-mjwh

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

Published Apr 15, 2024 · Updated Nov 6, 2024 · Assigned by HCL

Vendor: HCL Software Product: DevOps Deploy / Launch

Description

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.

Affected products

VendorProductAffectedFixed
HCL Software DevOps Deploy / Launch 7.0 - 7.0.5.20, 7.1 - 7.1.2.16, 7.2 - 7.2.3.9, 7.3 - 7.3.2.4, 8.0 - 8.0.0.1 —

References