HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Connections | Hcltech | 6.0 (including) | 6.0 (including) |
| Connections | Hcltech | 6.5 (including) | 6.5 (including) |
| Connections | Hcltech | 7.0 (including) | 7.0 (including) |
| Connections | Hcltech | 8.0 (including) | 8.0 (including) |
References
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0108433
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0108433