Weak Cryptographic Process in HCL Traveler Companion by HCL Technologies
CVE-2020-14264

3.9LOW

Key Information:

Vendor
HCL Software
Status
"hcl Traveler Companion"
Vendor
CVE Published:
25 October 2021

Summary

The HCL Traveler Companion is exposed to a vulnerability stemming from a weak cryptographic process found in the integration with the MobileIron AppConnect SDK. This vulnerability could potentially compromise sensitive data transmitted through the application, highlighting the need for robust cryptographic practices to safeguard mobile communications.

Affected Version(s)

"HCL Traveler Companion" "HCL Traveler Companion versions prior to 12.0.0"

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...
x_refsource_MISC

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.