CVE-2026-21812
LowCVSS 2.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
Risk Assessment
Interception of credentials or tokens could lead to unauthorized access to the AppScan system and related resources.
Recommendation
Update the HCL AppScan Azure Boards Plugin to the latest version and configure communication with the AppScan server exclusively over HTTPS.
Other vulnerabilities in HCL AppScan Azure Boards Plugin
Original NVD description (English source)
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS