VYPR
← All advisories
Low severity3.5NVD Advisory· Published Apr 18, 2024· Updated Jun 17, 2026

CVE-2024-23557

CVE-2024-23557

Description

HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack.

Affected products

8
  • HCLTech/Connections6 versions
    cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*
  • HCL Software/Connectionsllm-create
  • HCL Software/Connections Docscpe-rescue
    Range: 7.0, 8.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.