CVE-2024-23567

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC (affected versions not specified)

Description The application passes sensitive data through URL parameters during normal usage via the GET method. This practice can lead to the exposure of sensitive information as it may be stored in unintended locations, such as server logs, local browser history, and proxy logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.