CVE-2022-27548

MEDIUM

HCL Launch - Insufficiently Protected Credentials

Title source: llm
STIX 2.1

Description

HCL Launch stores user credentials in plain clear text which can be read by a local user.

References (1)

Core 1
Core References

Scores

CVSS v3 4.9
EPSS 0.0042
EPSS Percentile 33.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-522 CWE-256
Status published
Products (3)
hcltechsw/hcl_launch 7.0.5.10
hcltechsw/hcl_launch 7.1.2.6
hcltechsw/hcl_launch 7.2.2.1
Published Jul 06, 2022
Tracked Since Feb 18, 2026