CVE-2023-37541: HCL Connections is vulnerable to broken access control
Published Jun 25, 2024
·Updated
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
Affected Software
12 affected components
HCL Connections
hcltech Connections=7.0
hcltech Connections=8.0
hcltech Connections=8.0-cumulative_release1
hcltech Connections=8.0-cumulative_release2
hcltech Connections=8.0-cumulative_release3
hcltech Connections=8.0-cumulative_release4
hcltech Connections=8.0-cumulative_release5
hcltech Connections=8.0-cumulative_release6
hcltech Connections=8.0-cumulative_release7
hcltech Connections=8.0-cumulative_release8
hcltech Connections=8.0-cumulative_release9
Event History
Jun 25, 2024
CVE Published
via MITRE·03:08 PM
Data Sourced
via MITRE·03:08 PM
DescriptionSeverity
Data Sourced
via NVD·03:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37541?
CVE-2023-37541 is classified with a medium severity due to its impact on access controls.
2
How do I fix CVE-2023-37541?
To mitigate CVE-2023-37541, apply the latest security patches provided by HCL for HCL Connections.
3
What type of vulnerability is CVE-2023-37541?
CVE-2023-37541 is a broken access control vulnerability.
4
Who is affected by CVE-2023-37541?
CVE-2023-37541 affects all users of HCL Connections where improper access control has been implemented.
5
What can attackers do with CVE-2023-37541?
Attackers exploiting CVE-2023-37541 may be able to update data without proper authorization.