PT-2026-68314 · Hcl · Hcl Digital Experience Compose+1
CVE-2026-21766
·
Published
2026-08-05
·
Updated
2026-08-06
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
HCL Digital Experience (affected versions not specified)
HCL Digital Experience Compose (affected versions not specified)
Description
The default login portlet insufficiently protects credentials. Under specific configurations and use cases, sensitive information may be written to web server logs. This issue exclusively affects applications utilizing the default login portlet.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insufficiently Protected Credentials
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Hcl Digital Experience
Hcl Digital Experience Compose