HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record.

HCL Launch may store certain data for recurring activities in a plain text format.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user.