Description

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.

Severity (CVSS)

Base score3.7
SeverityLow
VersionCVSS 3.1
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Provided byCNA

Weaknesses

  • CWE-522 — CWE-522 Insufficiently Protected Credentials

Affected products

VendorProductVersions
HCL SoftwareHCL iControl4.3.0 and 4.4.0

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 01 Aug 2026 07:04 UTC.