3.7Niedrig
CVE-2026-56568HCL iControl is affected by multiple security vulnerabilities.
Beschreibung
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and authentication status
Schwachstellentyp (CWE):
CWE-209
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCL Software | HCL iControl | 4.3.0 and 4.4.0 | |
| hcltech | icontrol | 4.4.0 |
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:hcltech:icontrol:4.4.0:*:*:*:*:*:*:*