CVE-2026-21760: Devops Loop: güvenlik açığı

Açıklama (NVD)

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Özet bilgiler

Ürün

Hcltech Devops Loop

CVSS v3.1

4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS

%0,21 (yüzdelik 11)

CWE

CWE-425

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.hcl-software.com
• CWE-425