HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · hcltechNVD modified 2026-10-18 21:10
Affected (CPE criteria) 2
cpe:2.3:a:hcltech:dryice_iautomate:6.5.1:*:*:*:*:*:*:*cpe:2.3:a:hcltech:dryice_iautomate:6.5.2:*:*:*:*:*:*:*