Hcltechsw ≫ Hcl Launch

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

HCL Launch may store certain data for recurring activities in a plain text format.