CVE-2024-23564
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HCL Software | Aftermarket EPC | version 1.0.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-23564
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The application includes checks in the initial requests to verify the validity of the provided UserId, but similar validation is not applied to Email requests when sending passwords to user emails.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不充分的加密强度
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCL Software | Aftermarket EPC | version 1.0.0 | - |
II. Public POCs for CVE-2024-23564
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-23564
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-23564 (1)
IV. Related Vulnerabilities
Same vendor: HCL Software
- CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclo - CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerabil - CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulner - CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Resp - CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transp
Same weakness: CWE-326
V. Comments for CVE-2024-23564
No comments yet