Incorrect Default Permissions
CVE-2024-42188
Summary
HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.
- HIGH
- NETWORK
- LOW
- UNCHANGED
- REQUIRED
- LOW
- LOW
- NONE
CWE-276 - Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
References
Advisory Timeline
- Published
