HCL iAutomate Sensitive Information Disclosure Vulnerability

A sensitive information disclosure vulnerability has been identified in HCL iAutomate versions 6.5.1 and 6.5.2. This issue arises because the application processes requests using the HTTP GET method, which can inadvertently expose sensitive information in the query string. As a result, an attacker might access information or resources that should have remained confidential.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information or resources.

Remediation

Users can upgrade to HCL BigFix RunBook AI version 11.1, which addresses this vulnerability. For assistance with the upgrade process, customers can contact the HCL support team.