HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
History

Thu, 10 Apr 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Hcltechsw
Hcltechsw hcl Devops Deploy
Hcltechsw hcl Launch
CPEs cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*
cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*
Vendors & Products Hcltechsw
Hcltechsw hcl Devops Deploy
Hcltechsw hcl Launch

Thu, 03 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 02 Apr 2025 22:15:00 +0000

Type Values Removed Values Added
Description HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Title HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: HCL

Published: 2025-04-02T22:04:02.098Z

Updated: 2025-04-03T19:17:23.547Z

Reserved: 2025-01-06T16:00:33.541Z

Link: CVE-2025-0257

cve-icon Vulnrichment

Updated: 2025-04-03T19:17:16.407Z

cve-icon NVD

Status : Analyzed

Published: 2025-04-02T22:15:18.477

Modified: 2025-04-10T14:13:56.083

Link: CVE-2025-0257

cve-icon Redhat

No data.