5.0
Moyenne
CVE-2025-62329 HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which…
Description
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DevOps Deploy / Launch | Versions non publiées |
Autres CVE de DevOps Deploy / Launch
Les 5 CVE de DevOps Deploy / Launch →
CVE-2024-23558
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to…
6.3
Moyenne
CVE-2024-23561
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient…
4.3
Moyenne
CVE-2024-23560
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom…
4.4
Moyenne
CVE-2024-23559
HCL DevOps Deploy / Launch is generating an obsolete HTTP header
6.1
Moyenne