6.2Mittel
CVE-2026-56459HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure
Beschreibung
HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user.
Schwachstellentyp (CWE):
CWE-532
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCLSoftware | HCL DevOps Deploy / HCL Launch | 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0 | |
| hcltechsw | hcl devops deploy | 8.0.0.0 – < 8.0.1.14 | |
| hcltechsw | hcl launch | 7.3.0.0 – < 7.3.2.19 |
Referenzen und Patches
CPE-Treffer (NVD) (4)
cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.0.0.0 < 8.0.1.14cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.1.0.0 < 8.1.2.7cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.2.0.0 < 8.2.2.0cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*≥ 7.3.0.0 < 7.3.2.19