CVE-2023-23348: HCL Launch is vulnerable to sensitive information disclosure
First published: Mon Jul 10 2023(Updated: )
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.
Credit: psirt@hcl.com psirt@hcl.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HCL Launch | >=6.2.0.0<6.2.7.20 | |
| HCL Launch | >=7.0.0.0<7.0.5.15 | |
| HCL Launch | >=7.1.0.0<7.1.2.11 | |
| HCL Launch | >=7.2.0.0<7.2.3.4 | |
| HCL Launch | >=7.3.0.0<7.3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this HCL Launch vulnerability?
The vulnerability ID of this HCL Launch vulnerability is CVE-2023-23348.
What is the severity level of CVE-2023-23348?
CVE-2023-23348 has a severity level of medium (5.5).
How can sensitive information be disclosed in HCL Launch due to this vulnerability?
Sensitive information can be disclosed in HCL Launch if a manual edit of a configuration file has been performed.
Which versions of HCL Launch are affected by CVE-2023-23348?
Versions 6.2.0.0 to 6.2.7.20, 7.0.0.0 to 7.0.5.15, 7.1.0.0 to 7.1.2.11, 7.2.0.0 to 7.2.3.4, and 7.3.0.0 to 7.3.1.0 of HCL Launch are affected by CVE-2023-23348.
Where can I find more information about CVE-2023-23348?
You can find more information about CVE-2023-23348 at the following link: [https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105978](https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105978)
- collector/nvd-latest
- agent/author
- agent/type
- agent/softwarecombine
- agent/references
- agent/description
- agent/title
- agent/severity
- agent/first-publish-date
- agent/event
- agent/weakness
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/hcltechsw
- canonical/hcl launch
- version/hcl launch/6.2.0.0
- version/hcl launch/7.0.0.0
- version/hcl launch/7.1.0.0
- version/hcl launch/7.2.0.0
- version/hcl launch/7.3.0.0