CVE-2025-0273

MEDIUM EPSS 4.2%

Published Mar 27, 20251y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Mar 27, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

EPSS Exploit Probability

4.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

CWE-532

Vendor	Product	Version	Range
hcltechsw	hcl_devops_deploy	*	≥8.0.0.0 – <8.0.1.5
hcltechsw	hcl_devops_deploy	*	≥8.1.0 – <8.1.0.1
hcltechsw	hcl_launch	*	≥7.0.0.0 – ≤7.0.5.26
hcltechsw	hcl_launch	*	≥7.1.0.0 – <7.1.2.22
hcltechsw	hcl_launch	*	≥7.2.0.0 – <7.2.3.15
hcltechsw	hcl_launch	*	≥7.3.0.0 – ≤7.3.2.9

support.hcl-software.com https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138

Vendor Advisory

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.