Weak Cryptographic Process in HCL Traveler Companion on iOS
CVE-2020-14263

3.9LOW

Key Information:

Vendor
HCL Software
Status
"hcl Traveler Companion"
Vendor
CVE Published:
21 October 2021

Summary

HCL Traveler Companion for iOS is susceptible to a vulnerability stemming from a weak cryptographic process, which is integrated through the included MobileIron AppConnect SDK. This flaw can jeopardize the security of data transmitted through the application, exposing it to potential interception and misuse.

Affected Version(s)

"HCL Traveler Companion" "HCL Traveler Companion versions prior to 12.0.0"

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...
x_refsource_MISC

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.