2024-04-18 22:03:30 +00:00
{
"id" : "CVE-2024-30107" ,
"sourceIdentifier" : "psirt@hcl.com" ,
"published" : "2024-04-18T21:15:07.287" ,
2024-07-03 02:03:28 +00:00
"lastModified" : "2024-07-03T01:53:50.107" ,
2024-04-19 14:03:20 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-07-03 02:03:28 +00:00
"cveTags" : [ ] ,
2024-04-18 22:03:30 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios.\n"
2024-04-19 14:03:20 +00:00
} ,
{
"lang" : "es" ,
"value" : "HCL Connections contiene una vulnerabilidad de control de acceso roto que puede exponer informaci\u00f3n confidencial a usuarios no autorizados en ciertos escenarios."
2024-04-18 22:03:30 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "psirt@hcl.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 3.5 ,
"baseSeverity" : "LOW"
} ,
"exploitabilityScore" : 2.1 ,
"impactScore" : 1.4
}
]
} ,
2024-07-03 02:03:28 +00:00
"weaknesses" : [
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-284"
}
]
}
] ,
2024-04-18 22:03:30 +00:00
"references" : [
{
"url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112489" ,
"source" : "psirt@hcl.com"
}
]
}