Sensitive Information Exposure in HCL Aftermarket EPC

CVE-2024-23567

What is CVE-2024-23567?

HCL Aftermarket EPC is susceptible to a vulnerability that allows sensitive data to be transmitted via URL parameters. This can result in exposure of confidential information due to it being stored in various locations like server logs, browser history, and proxy logs. As a result, attackers may be able to access sensitive data that users assume is secure, making it critical for organizations to review their configurations and implement safeguards against this type of data exposure.

References