← All advisories

High severity8.1NVD Advisory· Published Oct 19, 2023· Updated Jun 17, 2026

CVE-2023-37503

CVE-2023-37503

Description

HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.

Affected products

4

HCLTech/Hcl Compass2 versions
cpe:2.3:a:hcltech:hcl_compass:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:hcl_compass:*:*:*:*:*:*:*:*range: >=2.0.0,<=2.0.3
- cpe:2.3:a:hcltech:hcl_compass:2.1.0:*:*:*:*:*:*:*
HCL Software/Compassllm-create
HCL Software/Hcl Compass2.0cpe-rescue
Range: 2.0, 2.1, 2.2

Patches

Vulnerability mechanics

References

1

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

0

No linked articles in our index yet.