Description
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
HCL Software DevOps Deploy / Launch
Default version status: unaffected
7.3 - 7.3.2.15; 8.0 - 8.0.1.10; 8.1 - 8.1.2.3affected