CVE Catalog
CVE-2023-37507
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
Information disclosure vulnerability in HCL DevOps Plan. An attacker can use the revealed information to focus their attacks.
Risk Assessment
Disclosure of system details may help an attacker precisely plan further attacks, increasing the risk of a security breach.
Recommendation
Apply patches provided by HCL and restrict system access to trusted users only.
Other vulnerabilities in HCL DevOps Plan
Original NVD description (English source)
HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.