8.1
High
CVE-2023-37503 HCL Compass is vulnerable to insecure password requirements
Description
HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Compass | Versions not published | |
| hcl_compass | 2.2 | No fix stated |
| hcl_compass | 2.1 | No fix stated |
| hcl_compass | 2.0 | No fix stated |