← All advisories

Low severity3.7NVD Advisory· Published Nov 14, 2024· Updated Jun 17, 2026

CVE-2024-42188

CVE-2024-42188

Description

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.

Affected products

11

HCLTech/Connections9 versions
cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release7:*:*:*:*:*:*
HCL Software/Connectionsllm-create
HCL Software/Connections Docscpe-rescue
Range: 7.0, 8.0

Patches

Vulnerability mechanics

References

1

support.hcl-software.com/csmnvdVendor Advisory

News mentions

0

No linked articles in our index yet.