CVE-2024-23567 — HCLSoftware / Aftermarket EPC

CVE-2024-23567

HCLSoftware / Aftermarket EPC PUBLISHED

Description (CNA)

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Aftermarket EPC	affected version 1.0.0

CWE

CWE-804

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.