HCL Technologies disclosed a vulnerability in its popular collaboration software, HCL Connections, which could potentially allow unauthorized users to access sensitive information.

The vulnerability, CVE-2024-30118, highlights significant concerns for organizations relying on this platform for secure communication and data sharing.

CVE-2024-30118 – Vulnerability Details

According to the HCL Reports, the vulnerability stems from improper handling of request data within HCL Connections. This flaw could enable attackers to access sensitive information without proper authorization.

The vulnerability has been assigned a CVSS (Common Vulnerability Scoring System) score of 3.5, indicating a low to moderate impact.

The CVSS vector is detailed as 3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N, suggesting that the attack can be executed remotely with low complexity but requires some level of user interaction.

Analyse Any Suspicious Links Using ANY.RUN’s New Safe Browsing Tool: Try for Free

Affected Products and Versions

The following versions of HCL Connections are affected by this vulnerability:

HCL Connections 7.0
HCL Connections 8.0

Organizations using these versions should take immediate action to mitigate potential risks.

Remediation and Fixes

HCL Technologies has released specific remediation steps for affected users:

Release	Remediation
HCL Connections 8.0	Upgrade to Cumulative Fixpack HCL Connections v8.0 CR6 or later
HCL Connections 7.0	Upgrade to the latest Cumulative Fixpack for v7.0 and apply iFix KB0113936

These updates are crucial for ensuring systems are protected against unauthorized data access.

No workarounds or mitigations are available for this vulnerability outside of applying the provided fixes. Organizations are urged to prioritize these updates to safeguard their data integrity.

As cyber threats evolve, vulnerabilities like CVE-2024-30118 underscore the importance of maintaining up-to-date security measures.

Organizations using HCL Connections must act swiftly to apply the recommended fixes and protect their sensitive information from potential breaches.

Upgrade Your Cybersecurity Skills With 100+ Premium Cyber Security Courses Online - Enroll Here

The post HCL Connections Vulnerability Let Attackers Steal Data Without Permission appeared first on Cyber Security News.