Cleartext Transmission Vulnerability in HCL AppScan Azure Boards Plugin
CVE-2026-21812

2.2LOW

Key Information:

Vendor

HCL Software Software

Status
Appscan Integration With Azure Boards For Asoc & A360
Vendor
CVE Published:
22 October 2026

What is CVE-2026-21812?

The HCL AppScan Azure Boards Plugin experiences a vulnerability due to the cleartext transmission of sensitive information over HTTP. This security flaw could enable an attacker to intercept critical credentials and authentication tokens while they are being transmitted. Users are urged to configure the plugin to use HTTPS to ensure secure communications and protect against potential data breaches. The latest update includes a warning feature that alerts users to the risks associated with HTTP communication, emphasizing the importance of safeguarding sensitive information.

Affected Version(s)

AppScan Integration with Azure Boards for ASoC & A360 Version 1.0.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
2.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.