HCL Unica Platform Improper Access Control Vulnerability Allowing Exposure of Sensitive Information

A vulnerability exists in HCL Unica Platform in versions through 25.1, where improper access controls have led to the presence of unprotected files. These files may contain sensitive information, including private or system data, which could be exploited by attackers to compromise the application, infrastructure, or users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially allowing attackers to compromise the application, its infrastructure, or its users.

Remediation

Users are advised to upgrade to HCL Unica Platform version 25.1.0.1, available from the My HCLSoftware Portal.