NetSight
medium4.3

CVE-2025-0256

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization f…

Impact

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

Affected products

VendorProductAffected versions
HcltechswHcl Devops Deploy
from 8.0.0.0 before 8.0.1.5
Version 8.1.0
HcltechswHcl Launch
from 7.0.0.0 before 7.0.5.26
from 7.1.0.0 before 7.1.2.22
from 7.2.0.0 before 7.2.3.15
from 7.3.0.0 before 7.3.2.10

Weakness classification

References