First published: Wed Dec 20 2023(Updated: )
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.
Credit: psirt@hcl.com
Affected Software | Affected Version | How to fix |
---|---|---|
HCL Launch | >=7.0.0.0<=7.0.5.18 | |
HCL Launch | >=7.1.0.0<=7.1.2.14 | |
HCL Launch | >=7.2.0.0<=7.2.3.7 | |
HCL Launch | >=7.3.0.0<=7.3.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-45703 has been classified as a denial of service vulnerability due to resource exhaustion.
To mitigate CVE-2023-45703, upgrade to a version of HCL Launch that is not affected, specifically above 7.0.5.18, 7.1.2.14, 7.2.3.7, or 7.3.2.2.
CVE-2023-45703 affects HCL Launch versions from 7.0.0.0 up to 7.0.5.18, 7.1.0.0 up to 7.1.2.14, 7.2.0.0 up to 7.2.3.7, and 7.3.0.0 up to 7.3.2.2.
CVE-2023-45703 poses a risk of denial of service, which can lead to system unavailability by exhausting resources.
There are no known workarounds for CVE-2023-45703; the primary mitigation is upgrading to an unaffected version.