CVE-2021-27784: HCL Launch container images may contain non-unique https certificates and database encryption key
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-27784.
What is the severity of CVE-2021-27784?
The severity of CVE-2021-27784 is high, with a CVSS score of 7.5.
Which software versions are affected by CVE-2021-27784?
CVE-2021-27784 affects HCL Launch Container images versions 7.0.0.0 to 7.0.52, 7.1.0.0 to 7.1.0.1, and 7.2.0.0 to 7.2.3.0.
What is the impact of CVE-2021-27784?
CVE-2021-27784 allows attackers to potentially compromise the confidentiality and integrity of HTTPS communication and the encryption of the database.
How can I fix CVE-2021-27784?
To fix CVE-2021-27784, follow the directions and use the provided tools from HCL to replace the non-unique keys and certificates.