NetSight
medium4.4

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.

Impact

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.

Affected products

VendorProductAffected versions
HcltechswHcl Devops Deploy
from 8.0.0.0 before 8.0.1
HcltechswHcl Launch
from 7.0.0.0 before 7.0.5.21
from 7.1.0.0 before 7.1.2.17
from 7.2.0.0 before 7.2.3.10
from 7.3.0.0 before 7.3.2.5

Weakness classification

References