PT-2026-60749
CVE-2024-23567
·
تاريخ النشر
2026-07-17
·
تاريخ التحديث
2026-10-02
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HCL Aftermarket EPC (affected versions not specified)
Description
The application passes sensitive data through URL parameters during normal usage via the GET method. This practice can lead to the exposure of sensitive information as it may be stored in unintended locations, such as server logs, local browser history, and proxy logs.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾