CVE-2023-37508

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

devops plan のその他の脆弱性

• CVE-2023-37507高 7.5HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information rev…
• CVE-2026-4096中 6.1IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This…
• CVE-2025-36364低 3.3IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
• CVE-2025-36363高 7.5IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account cre…