5.0
Medium
CVE-2025-62329 HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which…
Description
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DevOps Deploy / Launch | Versions not published |
Other CVEs of DevOps Deploy / Launch
The 5 CVEs of DevOps Deploy / Launch →
CVE-2024-23558
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to…
6.3
Medium
CVE-2024-23561
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient…
4.3
Medium
CVE-2024-23560
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom…
4.4
Medium
CVE-2024-23559
HCL DevOps Deploy / Launch is generating an obsolete HTTP header
6.1
Medium