HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dryice_iautomate | Hcltech | 6.5.1 (including) | 6.5.1 (including) |
| Dryice_iautomate | Hcltech | 6.5.2 (including) | 6.5.2 (including) |