CVE-2023-45701: HCL Launch is susceptible to sensitive information disclosure
HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45701?
CVE-2023-45701 has been classified with a moderate severity due to its potential to expose sensitive information to remote attackers.
How do I fix CVE-2023-45701?
To fix CVE-2023-45701, ensure to upgrade HCL Launch to the latest versions beyond the affected versions mentioned in the vulnerability report.
Which versions of HCL Launch are affected by CVE-2023-45701?
CVE-2023-45701 affects HCL Launch versions from 7.0.0.0 to 7.0.5.18, 7.1.0.0 to 7.1.2.14, 7.2.0.0 to 7.2.3.7, and 7.3.0.0 to 7.3.2.2.
What kind of information can be exposed by CVE-2023-45701?
CVE-2023-45701 can expose sensitive system information through detailed technical error messages returned in the browser.
Who can exploit CVE-2023-45701?
CVE-2023-45701 can be exploited by remote attackers who can trigger error messages that leak sensitive information.