CVE-2026-21759

{"id": "CVE-2026-21759", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21759", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-24T12:30:34.542569Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "HCL Hive", "versions": [{"status": "affected", "version": "1.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-24T13:17:32.703", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-215"}]}], "descriptions": [{"lang": "en", "value": "HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.\u00a0 Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface."}, {"lang": "es", "value": "HCL Hive se ve afectado por una vulnerabilidad de exposici\u00f3n de informaci\u00f3n donde la documentaci\u00f3n de Swagger se encontr\u00f3 expuesta p\u00fablicamente. Aunque no se descubri\u00f3 informaci\u00f3n sensible (p. ej., credenciales, PII), exponer la documentaci\u00f3n de la API a usuarios no autenticados puede aumentar la superficie de ataque general."}], "lastModified": "2026-10-12T15:10:00.207", "sourceIdentifier": "psirt@hcl.com"}