CVE-2025-62330
Unknown
Unknown - Not Provided
Cleartext Transmission Vulnerability in HCL DevOps Deploy Exposes Credentials
Publication date: 2025-12-16
Last updated on: 2025-12-16
Assigner: HCL Software
Description
Description
HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related data via passive monitoring or man-in-the-middle attacks.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hcl | devops_deploy | 3.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-319 | The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |