CVE-2024-23568

HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. Displaying version information of software could allow an attacker to determine which vulnerabilities are present in the software, particularly if an outdated software version is in use with published vulnerabilities.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Configurations

No configuration.

History

02 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) HCL Aftermarket EPC es vulnerable a ataques ya que la versión del software del servidor utilizada por la aplicación es revelada por el servidor web. Mostrar información de la versión del software podría permitir a un atacante determinar qué vulnerabilidades están presentes en el software, particularmente si se utiliza una versión de software desactualizada con vulnerabilidades publicadas.

Information

Published : 2026-07-17 14:17

Updated : 2026-10-02 00:10

NVD link : CVE-2024-23568

Mitre link : CVE-2024-23568

CVE.ORG link : CVE-2024-23568

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-23568", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-23568", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-17T15:17:06.324093Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "Aftermarket EPC", "versions": [{"status": "affected", "version": "version 1.0.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-17T14:17:16.990", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. Displaying version information of software could allow an attacker to determine which vulnerabilities are present in the software, particularly if an outdated software version is in use with published vulnerabilities."}, {"lang": "es", "value": "HCL Aftermarket EPC es vulnerable a ataques ya que la versi\u00f3n del software del servidor utilizada por la aplicaci\u00f3n es revelada por el servidor web. Mostrar informaci\u00f3n de la versi\u00f3n del software podr\u00eda permitir a un atacante determinar qu\u00e9 vulnerabilidades est\u00e1n presentes en el software, particularmente si se utiliza una versi\u00f3n de software desactualizada con vulnerabilidades publicadas."}], "lastModified": "2026-10-02T00:10:00.180", "sourceIdentifier": "psirt@hcl.com"}