CVE-2023-28022
HCL Connections is vulnerable to sensitive information disclosure
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.
HCL Connections es afectado por una vulnerabilidad de divulgación de información que podría permitir a un usuario obtener información confidencial a la que no tiene derecho, causada por un manejo inadecuado de los datos de la solicitud.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-10 CVE Reserved
- 2023-12-15 CVE Published
- 2023-12-21 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108433 | 2023-12-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hcltech Search vendor "Hcltech" | Connections Search vendor "Hcltech" for product "Connections" | 6.0 Search vendor "Hcltech" for product "Connections" and version "6.0" | - |
Affected
| ||||||
| Hcltech Search vendor "Hcltech" | Connections Search vendor "Hcltech" for product "Connections" | 6.5 Search vendor "Hcltech" for product "Connections" and version "6.5" | - |
Affected
| ||||||
| Hcltech Search vendor "Hcltech" | Connections Search vendor "Hcltech" for product "Connections" | 7.0 Search vendor "Hcltech" for product "Connections" and version "7.0" | - |
Affected
| ||||||
| Hcltech Search vendor "Hcltech" | Connections Search vendor "Hcltech" for product "Connections" | 8.0 Search vendor "Hcltech" for product "Connections" and version "8.0" | - |
Affected
| ||||||