HCL Traveler Sensitive Information Disclosure Vulnerability

A vulnerability allowing sensitive information disclosure has been identified in HCL Traveler versions prior to 14.5.1.0. The application generates error messages that include detailed information such as internal paths, file names, sensitive tokens, credentials, error codes, and stack traces. This verbose error messaging could be exploited by attackers to gain insights into the system's architecture and potentially launch targeted attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, allowing attackers to understand the system's architecture and possibly conduct targeted attacks.

Remediation

Users are advised to update HCL Traveler to the latest version. For additional details and links, see the HCL Traveler Fixes by Release article, which will contain the updated dependencies.