CVE-2024-42209

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
HCLCNA
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
hcltechconnections
7.0
hcltechconnections
8.0
hcltechconnections
8.0:cumulative_release1
hcltechconnections
8.0:cumulative_release2
hcltechconnections
8.0:cumulative_release3
hcltechconnections
8.0:cumulative_release4
hcltechconnections
8.0:cumulative_release5
hcltechconnections
8.0:cumulative_release6
hcltechconnections
8.0:cumulative_release7
hcltechconnections
8.0:cumulative_release8
hcltechconnections
8.0:cumulative_release9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122628