{"id":"CVE-2026-21759","state":"PUBLISHED","title":"HCL Hive is affected by an information exposure vulnerability","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","publishedAt":"2026-08-24T12:10:26.724Z","updatedAt":"2026-08-24T12:51:05.716Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","source":"HCL"},"assigner":"HCL","products":["HCLSoftware HCL Hive"],"affected":[{"vendor":"HCLSoftware","product":"HCL Hive","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731"],"weaknesses":["CWE-215"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/21xxx/CVE-2026-21759.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-21759","state":"PUBLISHED","datePublished":"2026-08-24T12:10:26.724Z","dateUpdated":"2026-08-24T12:51:05.716Z","assignerShortName":"HCL","assignerOrgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateReserved":"2026-01-05T16:07:55.983Z"},"containers":{"cna":{"title":"HCL Hive is affected by an information exposure vulnerability","descriptions":[{"lang":"en","value":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface."}],"affected":[{"vendor":"HCLSoftware","product":"HCL Hive","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-215","lang":"en","description":"CWE-215 Insertion of sensitive information into debugging code","type":"CWE"}]}],"providerMetadata":{"shortName":"HCL","orgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateUpdated":"2026-08-24T12:10:26.724Z"},"datePublic":"2026-08-24T12:10:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-21759","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-24T12:30:34.542569Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-24T12:51:05.716Z"}}]}}}