CVE-2024-23567 PUBLISHED

Assigner: HCL
Reserved: 18.01.2024 Published: 17.07.2026 Updated: 17.07.2026

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Product Status

Vendor HCLSoftware
Product Aftermarket EPC
Versions Default: unaffected
  • Version version 1.0.0 is affected

References

Problem Types

  • CWE-804: Guessable CAPTCHA CWE