HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Connections | Hcltech | 8.0 (including) | 8.0 (including) |
| Connections | Hcltech | 8.0-cumulative_release1 (including) | 8.0-cumulative_release1 (including) |
| Connections | Hcltech | 8.0-cumulative_release10 (including) | 8.0-cumulative_release10 (including) |
| Connections | Hcltech | 8.0-cumulative_release2 (including) | 8.0-cumulative_release2 (including) |
| Connections | Hcltech | 8.0-cumulative_release3 (including) | 8.0-cumulative_release3 (including) |
| Connections | Hcltech | 8.0-cumulative_release4 (including) | 8.0-cumulative_release4 (including) |
| Connections | Hcltech | 8.0-cumulative_release5 (including) | 8.0-cumulative_release5 (including) |
| Connections | Hcltech | 8.0-cumulative_release6 (including) | 8.0-cumulative_release6 (including) |
| Connections | Hcltech | 8.0-cumulative_release7 (including) | 8.0-cumulative_release7 (including) |
| Connections | Hcltech | 8.0-cumulative_release8 (including) | 8.0-cumulative_release8 (including) |
| Connections | Hcltech | 8.0-cumulative_release9 (including) | 8.0-cumulative_release9 (including) |