Sensitive Authentication Token Exposure in HCL DevOps Deploy Service
CVE-2025-0273
5.5MEDIUM
What is CVE-2025-0273?
HCL DevOps Deploy and HCL Launch have a vulnerability that allows potentially sensitive authentication tokens to be stored in log files. This could pose a risk as local users may have access to these log files, leading to unauthorized usage of sensitive information. Proper handling and safeguarding of log files are essential to mitigate this risk.
Affected Version(s)
HCL DevOps Deploy / HCL Launch 7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0