CVE-2024-42196: Hcltechsw Hcl Launch

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

Affected products

• Hcltechsw Hcl Launch: from 7.0.0.0, before 7.0.5.25 (fixed in 7.0.5.25); from 7.1.0.0, before 7.1.2.21 (fixed in 7.1.2.21); from 7.2.0.0, before 7.2.3.14 (fixed in 7.2.3.14)

Published 2024-12-06. Last modified 2026-06-17.