HCL Unica Sensitive Information Exposure Vulnerability

A vulnerability in HCL Unica versions 12.1.10 and prior, when using Tomcat, can lead to the exposure of sensitive system information. This information could potentially be exploited by an attacker to develop an attack strategy, leveraging known vulnerabilities within the application.

Impact

The vulnerability allows for the exposure of sensitive system information, which could be used to formulate an attack plan against the application.

Remediation

Users can mitigate this vulnerability by hiding server information in Tomcat. This can be done by creating a 'ServerInfo.properties' file in the 'tomcat/lib/org/apache/catalina/util' directory, adding a line to specify 'server.info=Application Server', and then saving the file and restarting Tomcat.