CVE-2026-56570

Katalog CVE

CVSS 5.3 · Medium EPSS 0,30%

Kerentanan Insufficiently Protected Credentials pada hcltech icontrol. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.

Rincian

Terbit di NVD

31 Juli 2026

Terakhir diubah

5 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395 advisory vendor