HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Connections | Hcltech | 7.0 (including) | 7.0 (including) |
| Connections | Hcltech | 8.0 (including) | 8.0 (including) |
| Connections | Hcltech | 8.0-cumulative_release1 (including) | 8.0-cumulative_release1 (including) |
| Connections | Hcltech | 8.0-cumulative_release2 (including) | 8.0-cumulative_release2 (including) |
| Connections | Hcltech | 8.0-cumulative_release3 (including) | 8.0-cumulative_release3 (including) |
| Connections | Hcltech | 8.0-cumulative_release4 (including) | 8.0-cumulative_release4 (including) |
| Connections | Hcltech | 8.0-cumulative_release5 (including) | 8.0-cumulative_release5 (including) |
| Connections | Hcltech | 8.0-cumulative_release6 (including) | 8.0-cumulative_release6 (including) |
| Connections | Hcltech | 8.0-cumulative_release7 (including) | 8.0-cumulative_release7 (including) |
| Connections | Hcltech | 8.0-cumulative_release8 (including) | 8.0-cumulative_release8 (including) |
| Connections | Hcltech | 8.0-cumulative_release9 (including) | 8.0-cumulative_release9 (including) |
References
- https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0119435
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0114156