1. Home
  2. CVE Database
  3. CVE-2025-0279
MEDIUM · 4.3

CVE-2025-0279

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces....

Vulnerability Description

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HcltechTraveler<= 14.0.0.1

Related Weaknesses (CWE)

CWE-209

References

FAQ

What is CVE-2025-0279?

CVE-2025-0279 is a vulnerability with a CVSS score of 4.3 (MEDIUM). HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces....

How severe is CVE-2025-0279?

CVE-2025-0279 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-0279?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Traveler.