high8.1
CVE-2023-37503
HCL Compass is vulnerable to insecure password requirements.
Impact
HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Compass | from 2.0.0 through 2.0.3 from 2.2.0 before 2.2.3 Version 2.1.0 |