CVE-2026-56459
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A vulnerability in HCL DevOps Deploy / HCL Launch allows sensitive information disclosure. The application stores potentially sensitive data in log files that can be read by a local user.
Risk Assessment
A local user could access sensitive data such as passwords or API keys stored in logs, leading to security breaches and information leakage.
Recommendation
Restrict access permissions to log files and implement mechanisms to mask sensitive data before writing it to logs.
Other vulnerabilities in HCL DevOps Deploy / HCL Launch
See all- CVE-2026-67071Medium
HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure values embedded inside insecure properties.
- CVE-2026-56457Medium
A vulnerability in HCL DevOps Deploy / HCL Launch allows exposure of sensitive information in output logs. An attacker with access to the logs could potentially obtain sensitive values related to that step.
Original NVD description (English source)
HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user.