CVEvulnerability

CVE-2026-56457

4.3 MEDIUM Published 2026-06-29 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-06-29
Last modified
2026-10-25
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-532

Description

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step.

Affected configurations

• hcltechsw hcl devops deploy (>= 8.0.0.0 < 8.0.1.14) • hcltechsw hcl devops deploy (>= 8.1.0.0 < 8.1.2.7) • hcltechsw hcl devops deploy (>= 8.2.0.0 < 8.2.2.0) • hcltechsw hcl launch (>= 7.3.0.0 < 7.3.2.19)

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References