CVE-2026-56568
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages, displaying raw server/API error messages to users instead of generic ones, exposing internal endpoint names, request parameters, error codes, and authentication status.
Risk Assessment
The risk is exposure of technical details to attackers, aiding further attacks or privilege escalation.
Recommendation
Configure HCL iControl to display generic error messages instead of raw API data.
Original NVD description (English source)
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and authentication status