6.3
Medium
CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to…
Description
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DevOps Deploy / Launch | Versions not published | |
| hcl_launch 7.3 | 7.3 → 7.3.2.4 | No fix stated |
| hcl_launch 7.2 | 7.2 → 7.2.3.9 | No fix stated |
| hcl_launch 7.1 | 7.1 → 7.1.2.16 | No fix stated |
| hcl_launch 7.0 | 7.0.0.0 → 7.0.5.20 | No fix stated |
| hcl_devops_deploy 8.0 | 8.0.0.0 → 8.0.0.1 | No fix stated |
Other CVEs of DevOps Deploy / Launch
The 5 CVEs of DevOps Deploy / Launch →
CVE-2025-62329
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which…
5.0
Medium
CVE-2024-23561
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient…
4.3
Medium
CVE-2024-23560
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom…
4.4
Medium
CVE-2024-23559
HCL DevOps Deploy / Launch is generating an obsolete HTTP header
6.1
Medium