HCL Traveler Weak Default HTTP Header Validation Vulnerability Allowing Authentication Bypass

A vulnerability exists in HCL Traveler versions prior to 14.5.1.0, related to weak default HTTP header validation. This flaw could enable an attacker to bypass certain authentication checks, potentially leading to unauthorized access or actions.

Impact

Exploitation of this vulnerability could allow an attacker to bypass authentication checks, potentially leading to unauthorized access or actions within the application.

Remediation

Users are advised to update HCL Traveler to the latest version. For details on fixes by release, consult the HCL Traveler Fixes by Release article.