Cleartext Transmission Vulnerability in HCL DevOps Deploy

CVE-2025-62330

What is CVE-2025-62330?

HCL DevOps Deploy poses a security risk due to its failure to redirect HTTP connections to HTTPS, leaving sensitive information transmitted over the network in clear text. This vulnerability allows attackers with network access to potentially intercept or alter user credentials and session-related data. Organizations using this product are advised to address this vulnerability promptly to safeguard sensitive information against passive observations and man-in-the-middle attacks.

References