CVE-2025-0257 | THREATINT

Description

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

Reserved 2025-01-06 | Published 2025-04-02 | Updated 2025-04-03 | Assigner HCL

MEDIUM: 6.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status

unaffected

7.1 - 7.1.2.22; 7.2 - 7.2.3.15; 7.3 - 7.3.2.10; 8.0 - 8.0.1.5; 8.1 - 8.1.0.1

affected

References

support.hcl-software.com/...rticle&sysparm_article=KB0119061

cve.org (CVE-2025-0257)

nvd.nist.gov (CVE-2025-0257)

Download JSON