CVE-2026-56457: HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information
Published Jun 29, 2026
·Updated
HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step.
Affected Software
5 affected components
HCL DevOps Deploy / HCL Launch
Hcltechsw Hcl Devops Deploy>=8.0.0.0<8.0.1.14
Hcltechsw Hcl Devops Deploy>=8.1.0.0<8.1.2.7
Hcltechsw Hcl Devops Deploy>=8.2.0.0<8.2.2.0
Hcltechsw Hcl Launch>=7.3.0.0<7.3.2.19
Event History
Jun 29, 2026
CVE Published
via MITRE·01:18 PM
Data Sourced
via MITRE·01:18 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-56457?
The severity of CVE-2026-56457 is medium with a score of 4.3.
2
What type of vulnerability is CVE-2026-56457?
CVE-2026-56457 is classified as an exposure of sensitive information vulnerability.
3
How does CVE-2026-56457 affect HCL DevOps Deploy / HCL Launch?
CVE-2026-56457 affects HCL DevOps Deploy / HCL Launch by allowing an attacker to access sensitive values through output logs.
4
What is the risk associated with CVE-2026-56457?
The risk associated with CVE-2026-56457 is rated as 22, indicating potential security concerns.
5
How can I mitigate the risks posed by CVE-2026-56457?
To mitigate the risks of CVE-2026-56457, ensure proper access controls are implemented for output logs to prevent unauthorized access.