Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-56460 EUVD-2026-42555GHSA-cx4j-m7pg-57q2

HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

Published Jul 9, 2026 · Updated Jul 9, 2026 · Assigned by HCL

Vendor: HCL Software Product: HCL DevOps Deploy / HCL Launch

Description

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
HCLSoftware HCL DevOps Deploy / HCL Launch 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0 —

References