HCL Traveler Information Disclosure Vulnerability Allowing Targeted Attacks

An information disclosure vulnerability has been identified in HCL Traveler. The application generates error messages that reveal detailed information about errors and failures, including internal paths, file names, sensitive tokens, credentials, error codes, and stack traces. This information could be exploited by attackers to gain insights into the system's architecture and potentially launch targeted attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing attackers to gather sensitive data that could be used to understand the system's architecture and plan targeted attacks.