HCL Connections Under Denial of Service Attack
CVE-2023-28018

5.5MEDIUM

Key Information:

Vendor
HCL Software Software
Status
HCL Software Connections
Vendor
CVE Published:
12 February 2024

Summary

HCL Connections exhibits a vulnerability that could be exploited to perform a denial of service attack. This is due to insufficient validation on specific requests, allowing an attacker to send tailored requests that can disrupt services for users. Ensuring proper validation can mitigate this risk and maintain service reliability for HCL Connections users.

Affected Version(s)

HCL Connections 6.5, 7.0, 8.0

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.