HCL DevOps Deploy and HCL Launch Agent Relay Service Authentication Vulnerability Allowing Unauthorized Access and Data Exposure

A vulnerability exists in the Agent Relay service of HCL DevOps Deploy and HCL Launch, versions 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, 7.3 through 7.3.2.10, 8.0 through 8.0.1.5, and 8.1 through 8.1.0.1. This vulnerability could lead to unauthorized access to other services or the potential exposure of sensitive data, due to missing authentication in the Agent Relay service.

Impact

Exploitation of this vulnerability could result in unauthorized access to services or exposure of sensitive data.

Remediation

Users are advised to upgrade to version 7.1.2.23, 7.2.3.16, 7.3.2.11, 8.0.1.6, or 8.1.1.0. These versions are available from the HCL Software License and Download Portal.