CVE-2025-0273 - Vulnerability Details

Vendors	Products
Hcltechsw	Hcl Devops Deploy Hcl Launch

Link	Providers
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138

Type	Values Removed	Values Added
First Time appeared		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch
CPEs		cpe:2.3:a:hcltechsw:hcl_devops_deploy:::::::: cpe:2.3:a:hcltechsw:hcl_launch::::::::
Vendors & Products		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.
Title		HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
Weaknesses		CWE-532
References		https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0273", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "state": "PUBLISHED", "assignerShortName": "HCL", "dateReserved": "2025-01-06T16:01:29.767Z", "datePublished": "2025-03-27T05:03:12.079Z", "dateUpdated": "2025-03-27T14:37:02.362Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HCL DevOps Deploy / HCL Launch", "vendor": "HCL Software", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0"}]}], "datePublic": "2025-03-27T03:55:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.</span><br>"}], "value": "HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-03-27T05:03:12.079Z"}, "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138"}], "source": {"discovery": "UNKNOWN"}, "title": "HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-27T14:19:25.052320Z", "id": "CVE-2025-0273", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T14:37:02.362Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-0273 (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

state : PUBLISHED (string)

assignerShortName : HCL (string)

dateReserved : 2025-01-06T16:01:29.767Z (string)

datePublished : 2025-03-27T05:03:12.079Z (string)

dateUpdated : 2025-03-27T14:37:02.362Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : HCL DevOps Deploy / HCL Launch (string)

vendor : HCL Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0 (string)

}

]

}

]

datePublic : 2025-03-27T03:55:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. (string)

}

]

value : HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-532 (string)

description : CWE-532 Insertion of Sensitive Information into Log File (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2025-03-27T05:03:12.079Z (string)

}

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-27T14:19:25.052320Z (string)

id : CVE-2025-0273 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-27T14:37:02.362Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0273", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-27T14:19:25.052320Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T14:36:53.237Z"}}], "cna": {"title": "HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HCL Software", "product": "HCL DevOps Deploy / HCL Launch", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0"}], "defaultStatus": "unaffected"}], "datePublic": "2025-03-27T03:55:00.000Z", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-03-27T05:03:12.079Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0273", "state": "PUBLISHED", "dateUpdated": "2025-03-27T14:37:02.362Z", "dateReserved": "2025-01-06T16:01:29.767Z", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "datePublished": "2025-03-27T05:03:12.079Z", "assignerShortName": "HCL"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-0273 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-27T14:19:25.052320Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-27T14:36:53.237Z (string)

}

]

cna : { »

title : HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability (string)

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.5 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : HCL Software (string)

product : HCL DevOps Deploy / HCL Launch (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0 (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2025-03-27T03:55:00.000Z (string)

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-532 (string)

description : CWE-532 Insertion of Sensitive Information into Log File (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2025-03-27T05:03:12.079Z (string)

}

cveMetadata : { »

cveId : CVE-2025-0273 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-27T14:37:02.362Z (string)

dateReserved : 2025-01-06T16:01:29.767Z (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

datePublished : 2025-03-27T05:03:12.079Z (string)

assignerShortName : HCL (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*", "matchCriteriaId": "42A4C3FF-3686-420F-894E-4D51AACEA84B", "versionEndExcluding": "8.0.1.5", "versionStartIncluding": "8.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*", "matchCriteriaId": "335E9410-E48A-408A-99AB-17C352FECE14", "versionEndExcluding": "8.1.0.1", "versionStartIncluding": "8.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "3EA22CDE-24F0-4272-B8FD-F52E6BB813A3", "versionEndIncluding": "7.0.5.26", "versionStartIncluding": "7.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "38CF144B-AD62-4D88-BEF5-65CB622A041F", "versionEndExcluding": "7.1.2.22", "versionStartIncluding": "7.1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8BBA9A0-5AAA-49CD-B8B5-A4188B4697E1", "versionEndExcluding": "7.2.3.15", "versionStartIncluding": "7.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A3836CE-993D-4B8A-B546-D9AD5FD14293", "versionEndIncluding": "7.3.2.9", "versionStartIncluding": "7.3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user."}, {"lang": "es", "value": "HCL DevOps Deploy / HCL Launch almacena informaci\u00f3n de token de autenticaci\u00f3n potencialmente confidencial en archivos de registro que un usuario local podr\u00eda leer."}], "id": "CVE-2025-0273", "lastModified": "2025-04-11T16:19:26.103", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "psirt@hcl.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-03-27T05:15:38.237", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "psirt@hcl.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-532"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 42A4C3FF-3686-420F-894E-4D51AACEA84B (string)

versionEndExcluding : 8.0.1.5 (string)

versionStartIncluding : 8.0.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 335E9410-E48A-408A-99AB-17C352FECE14 (string)

versionEndExcluding : 8.1.0.1 (string)

versionStartIncluding : 8.1.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3EA22CDE-24F0-4272-B8FD-F52E6BB813A3 (string)

versionEndIncluding : 7.0.5.26 (string)

versionStartIncluding : 7.0.0.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 38CF144B-AD62-4D88-BEF5-65CB622A041F (string)

versionEndExcluding : 7.1.2.22 (string)

versionStartIncluding : 7.1.0.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B8BBA9A0-5AAA-49CD-B8B5-A4188B4697E1 (string)

versionEndExcluding : 7.2.3.15 (string)

versionStartIncluding : 7.2.0.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4A3836CE-993D-4B8A-B546-D9AD5FD14293 (string)

versionEndIncluding : 7.3.2.9 (string)

versionStartIncluding : 7.3.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. (string)

}

1 : { »

lang : es (string)

value : HCL DevOps Deploy / HCL Launch almacena información de token de autenticación potencialmente confidencial en archivos de registro que un usuario local podría leer. (string)

}

]

id : CVE-2025-0273 (string)

lastModified : 2025-04-11T16:19:26.103 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-03-27T05:15:38.237 (string)

references : [ »

0 : { »

source : psirt@hcl.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138 (string)

}

]

sourceIdentifier : psirt@hcl.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-532 (string)

}

]

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-532 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object