6.5Orta
CVE-2026-56460HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
Açıklama
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Zayıflık türü (CWE):
CWE-201
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| HCLSoftware | HCL DevOps Deploy / HCL Launch | 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0 | |
| hcltechsw | hcl devops deploy | 8.0.0.0 – < 8.0.1.14 | |
| hcltechsw | hcl launch | 7.3.0.0 – < 7.3.2.19 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (4)
cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.0.0.0 < 8.0.1.14cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.1.0.0 < 8.1.2.7cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*≥ 8.2.0.0 < 8.2.2.0cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*≥ 7.3.0.0 < 7.3.2.19