What is the severity of CVE-2023-45701?

CVE-2023-45701 has been classified with a moderate severity due to its potential to expose sensitive information to remote attackers.

How do I fix CVE-2023-45701?

To fix CVE-2023-45701, ensure to upgrade HCL Launch to the latest versions beyond the affected versions mentioned in the vulnerability report.

Which versions of HCL Launch are affected by CVE-2023-45701?

CVE-2023-45701 affects HCL Launch versions from 7.0.0.0 to 7.0.5.18, 7.1.0.0 to 7.1.2.14, 7.2.0.0 to 7.2.3.7, and 7.3.0.0 to 7.3.2.2.

What kind of information can be exposed by CVE-2023-45701?

CVE-2023-45701 can expose sensitive system information through detailed technical error messages returned in the browser.

Who can exploit CVE-2023-45701?

CVE-2023-45701 can be exploited by remote attackers who can trigger error messages that leak sensitive information.

Vulnerability/
CVE-2023-45701

medium

6.5

CWE

209

28/12/2023

4/1/2024

CVE-2023-45701: HCL Launch is susceptible to sensitive information disclosure

First published: Thu Dec 28 2023(Updated: )

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Credit: psirt@hcl.com

Affected Software	Affected Version	How to fix
HCL Launch	>=7.0.0.0<=7.0.5.18
HCL Launch	>=7.1.0.0<=7.1.2.14
HCL Launch	>=7.2.0.0<=7.2.3.7
HCL Launch	>=7.3.0.0<=7.3.2.2

Never miss a vulnerability like this again

Reference Links

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108645

Frequently Asked Questions

What is the severity of CVE-2023-45701?
CVE-2023-45701 has been classified with a moderate severity due to its potential to expose sensitive information to remote attackers.
How do I fix CVE-2023-45701?
To fix CVE-2023-45701, ensure to upgrade HCL Launch to the latest versions beyond the affected versions mentioned in the vulnerability report.
Which versions of HCL Launch are affected by CVE-2023-45701?
CVE-2023-45701 affects HCL Launch versions from 7.0.0.0 to 7.0.5.18, 7.1.0.0 to 7.1.2.14, 7.2.0.0 to 7.2.3.7, and 7.3.0.0 to 7.3.2.2.
What kind of information can be exposed by CVE-2023-45701?
CVE-2023-45701 can expose sensitive system information through detailed technical error messages returned in the browser.
Who can exploit CVE-2023-45701?
CVE-2023-45701 can be exploited by remote attackers who can trigger error messages that leak sensitive information.

collector/mitre-cve
agent/type
agent/last-modified-date
agent/first-publish-date
agent/softwarecombine
agent/author
agent/references
agent/weakness
agent/event
agent/severity
agent/title
agent/source
agent/tags
agent/description
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/hcltechsw
canonical/hcl launch
version/hcl launch/7.0.0.0
version/hcl launch/7.0.5.18
version/hcl launch/7.1.0.0
version/hcl launch/7.1.2.14
version/hcl launch/7.2.0.0
version/hcl launch/7.2.3.7
version/hcl launch/7.3.0.0
version/hcl launch/7.3.2.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.