CVE-2024-23575 — MEDIUM (5.3)

Vulnerability Description

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error messages to help launch another ,more focused attack.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-209

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

FAQ

What is CVE-2024-23575?

CVE-2024-23575 is a vulnerability with a CVSS score of 5.3 (MEDIUM). HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error me...

How severe is CVE-2024-23575?

CVE-2024-23575 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-23575?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.