Sensitive Information Exposure in HCL DevOps Deploy by HCL
CVE-2026-56457
4.3MEDIUM
What is CVE-2026-56457?
HCL DevOps Deploy is affected by a vulnerability that permits unauthorized access to sensitive information through compromised output logs. An attacker with access to these logs could extract sensitive values inadvertently logged during operation, potentially compromising security policies and exposing critical data. Organizations using HCL DevOps Deploy should ensure proper log management and access controls to mitigate risks associated with this vulnerability.
Affected Version(s)
HCL DevOps Deploy / HCL Launch 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0
