6.5Mittel
CVE-2026-56460HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
Beschreibung
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Schwachstellentyp (CWE):
CWE-201
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCLSoftware | HCL DevOps Deploy / HCL Launch | 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0 | |
| hcltechsw | hcl devops deploy | 8.0.0.0 – < 8.0.1.14 | |
| hcltechsw | hcl launch | 7.3.0.0 – < 7.3.2.19 |
Referenzen und Patches
CPE-Treffer (NVD) (4)
cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.0.0.0 < 8.0.1.14cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.1.0.0 < 8.1.2.7cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.2.0.0 < 8.2.2.0cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*≥ 7.3.0.0 < 7.3.2.19