HCL Commerces Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hcl_commerce | Hcltechsw | 9.0.1 (including) | 9.0.1.18 (including) |
| Hcl_commerce | Hcltechsw | 9.1.0 (including) | 9.1.10 (including) |