VYPR
Medium severity4.9NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-42445

CVE-2022-42445

Description

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.

Affected products

3
  • HCL Software/Launchllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 6.2.7.0 - 6.2.7.17, 7.0.0.0 - 7.0.5.12, 7.1.0.0 - 7.1.2.8, 7.2.0.0 - 7.2.3.1
  • cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*
    Range: >=6.2.7.0,<=6.2.7.17

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.