CVE-2026-56569

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.

CVSS v3 4.0 MEDIUM

4.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:icontrol:4.3.0:*:*:*:*:*:*:*

History

23 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) HCL iControl fue afectado por vulnerabilidades de Exposición de Datos Sensibles. Implica la exposición pública de archivos de configuración internos debido a un endurecimiento inadecuado del servidor web o de la aplicación.

Information

Published : 2026-07-31 16:17

Updated : 2026-10-23 23:10

NVD link : CVE-2026-56569

Mitre link : CVE-2026-56569

CVE.ORG link : CVE-2026-56569

JSON object : View

Products Affected

hcltech

icontrol

CWE

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

{"id": "CVE-2026-56569", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56569", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T17:42:43.286469Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "HCL iControl", "versions": [{"status": "affected", "version": "4.3.0 and 4.4.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-31T16:17:07.523", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-497"}]}], "descriptions": [{"lang": "en", "value": "HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening."}, {"lang": "es", "value": "HCL iControl fue afectado por vulnerabilidades de Exposici\u00f3n de Datos Sensibles. Implica la exposici\u00f3n p\u00fablica de archivos de configuraci\u00f3n internos debido a un endurecimiento inadecuado del servidor web o de la aplicaci\u00f3n."}], "lastModified": "2026-10-23T23:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:icontrol:4.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB390823-E01A-4BED-9DA4-34273834A8E8"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}