CVE-2021-27784: Hcltech Hcl Launch Container Image

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.

Affected products

• Hcltech Hcl Launch Container Image: from 7.0.0.0, up to and including 7.0.52; from 7.1.0.0, before 7.1.0.1 (fixed in 7.1.0.1); from 7.2.0.0, up to and including 7.2.3.0; version 7.1.0.1 only

Published 2022-10-31. Last modified 2026-06-17.