CVE-2024-23571

HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local cache, then this may be retrieved by other users who have access to the same computer at a future time.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Configurations

No configuration.

History

02 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) HCL Aftermarket EPC es vulnerable a ataques ya que la aplicación no tiene una política de almacenamiento en caché adecuada que especifique la medida en que la página y sus campos de formulario deberían ser almacenados en caché. Si la información confidencial en las respuestas de la aplicación se almacena en la caché local, entonces esta podría ser recuperada por otros usuarios que tienen acceso al mismo equipo en un momento futuro.

Information

Published : 2026-07-17 14:17

Updated : 2026-10-02 00:10

NVD link : CVE-2024-23571

Mitre link : CVE-2024-23571

CVE.ORG link : CVE-2024-23571

JSON object : View

Products Affected

No product.

CWE

CWE-525

Use of Web Browser Cache Containing Sensitive Information

{"id": "CVE-2024-23571", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-23571", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-17T15:18:26.429399Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "Aftermarket EPC", "versions": [{"status": "affected", "version": "version 1.0.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-17T14:17:17.343", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-525"}]}], "descriptions": [{"lang": "en", "value": "HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local cache, then this may be retrieved by other users who have access to the same computer at a future time."}, {"lang": "es", "value": "HCL Aftermarket EPC es vulnerable a ataques ya que la aplicaci\u00f3n no tiene una pol\u00edtica de almacenamiento en cach\u00e9 adecuada que especifique la medida en que la p\u00e1gina y sus campos de formulario deber\u00edan ser almacenados en cach\u00e9. Si la informaci\u00f3n confidencial en las respuestas de la aplicaci\u00f3n se almacena en la cach\u00e9 local, entonces esta podr\u00eda ser recuperada por otros usuarios que tienen acceso al mismo equipo en un momento futuro."}], "lastModified": "2026-10-02T00:10:00.180", "sourceIdentifier": "psirt@hcl.com"}