CVE-2024-23558
Assigner: HCL
Published: 2024-04-15T21:00:12.401Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: DevOps Deploy / Launch
vendor: HCL Software
versions: status: affected
version: 7.0 - 7.0.5.20, 7.1 - 7.1.2.16,  7.2 - 7.2.3.9,  7.3 - 7.3.2.4, 8.0 - 8.0.0.1
datePublic: 2024-04-15T20:38:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <span style="background-color: rgb(255, 255, 255);">HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.</span><br>
value: HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
title: HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout
x_generator: engine: Vulnogram 0.1.0-dev