HCL Connections Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in HCL Connections versions 7.0 and 8.0. This issue arises in specific user navigation scenarios, where a user may unintentionally access limited internal metadata through their browser.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal metadata, allowing users to obtain limited information that should not be publicly available.

Remediation

Users of HCL Connections 8.0 should upgrade to Cumulative Fixpack HCL Connections v8.0 CR11 or later. Users of HCL Connections 7.0 should upgrade to the latest Cumulative Fixpack for HCL Connections v7.0 and install KB0124242.