4.4
Medium
CVE-2024-23560 HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom…
Description
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DevOps Deploy / Launch | Versions not published |
Other CVEs of DevOps Deploy / Launch
The 5 CVEs of DevOps Deploy / Launch →
CVE-2025-62329
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which…
5.0
Medium
CVE-2024-23558
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to…
6.3
Medium
CVE-2024-23561
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient…
4.3
Medium
CVE-2024-23559
HCL DevOps Deploy / Launch is generating an obsolete HTTP header
6.1
Medium