Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-0257 EUVD-2025-15132GHSA-29q8-r6j6-rcv6

HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services

Published Apr 2, 2025 · Updated Apr 3, 2025 · Assigned by HCL

Description

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

Affected products

VendorProductAffectedFixed
HCL Software HCL DevOps Deploy / HCL Launch 7.1 - 7.1.2.22; 7.2 - 7.2.3.15; 7.3 - 7.3.2.10; 8.0 - 8.0.1.5; 8.1 - 8.1.0.1 —

References