PT-2025-14561 · Hcl · Hcl Launch+1

Published 2025-04-02 · Updated 2025-04-03 · CVE-2025-0257

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL DevOps Deploy / HCL Launch (affected versions not specified)

Description The issue is related to missing authentication in the Agent Relay service, which could allow unauthorized access to other services or potential exposure of sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-0257

Affected Products

Hcl Devops Deploy

Hcl Launch

References · 6

• https://osv.dev/vulnerability/CVE-2025-0257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0257 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119061 · Vendor Advisory
• https://t.me/cvetracker/20627 · Telegram Post
• https://twitter.com/CVEnew/status/1907709621344555465 · Twitter Post
• https://t.me/cvedetector/21922 · Telegram Post