6.3
Moyenne
CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to…
Description
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DevOps Deploy / Launch | Versions non publiées | |
| hcl_launch 7.3 | 7.3 → 7.3.2.4 | Pas de correctif indiqué |
| hcl_launch 7.2 | 7.2 → 7.2.3.9 | Pas de correctif indiqué |
| hcl_launch 7.1 | 7.1 → 7.1.2.16 | Pas de correctif indiqué |
| hcl_launch 7.0 | 7.0.0.0 → 7.0.5.20 | Pas de correctif indiqué |
| hcl_devops_deploy 8.0 | 8.0.0.0 → 8.0.0.1 | Pas de correctif indiqué |
Autres CVE de DevOps Deploy / Launch
Les 5 CVE de DevOps Deploy / Launch →
CVE-2025-62329
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which…
5.0
Moyenne
CVE-2024-23561
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient…
4.3
Moyenne
CVE-2024-23560
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom…
4.4
Moyenne
CVE-2024-23559
HCL DevOps Deploy / Launch is generating an obsolete HTTP header
6.1
Moyenne