HCL DevOps Deploy and HCL Launch Sensitive Information Log Vulnerability

A vulnerability exists in HCL DevOps Deploy and HCL Launch, where potentially sensitive authentication token information is logged in files that could be accessed by a local user. This issue affects versions 7.0 through 7.0.5.26, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, 7.3 through 7.3.2.9, 8.0 through 8.0.1.4, and 8.1 through 8.1.0.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive authentication tokens, which could be misused for authentication purposes or to gain access to restricted areas of the application.

Remediation

Users are advised to upgrade to version 7.0.5.26, 7.1.2.22, 7.2.3.15, 7.3.2.11, 8.0.1.5, 8.1.0.1 or later. Instructions for downloading the updated versions are available on the HCL Software License and Download Portal.