Information Disclosure in HCL AppScan Azure Boards Plugin

CVE-2026-21811

What is CVE-2026-21811?

The HCL AppScan Azure Boards Plugin is susceptible to an Information Disclosure flaw that may result in sensitive information being exposed in plaintext during pipeline execution. This exposure can occur through various means, such as task outputs, debug logs, environment variable dumps, or build agent scripts. Even though these secrets may appear masked in user interfaces, they can still be accessible to unauthorized users based on the specific configuration of the pipeline.

References