Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-56460

HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware HCL DevOps Deploy / HCL Launch

Default version status: unaffected

  • 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0affected

References