Information Disclosure Vulnerability in HCL Traveler
CVE-2025-0279
4.3MEDIUM
Key Information:
- Vendor
- HCL Software Software
- Status
- HCL Software Traveler
- Vendor
- CVE Published:
- 3 April 2025
Summary
HCL Traveler is susceptible to an information disclosure vulnerability where error messages may inadvertently expose sensitive details such as internal file paths, credentials, and error codes. This leakage of critical data can help attackers to form a clearer picture of the underlying system architecture, potentially leading to targeted and more sophisticated attacks. Organizations utilizing HCL Traveler should consider implementing safeguards to mitigate the risks associated with this vulnerability.
Affected Version(s)
HCL Traveler <14.0.0.1FP2
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved