« Volver al listado

CVE-2021-27784

Estado: ModificadaAlta (7.5)—

The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — HCL Launch Container Image

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-27784",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-27784",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-02T17:38:51.543908Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@hcl.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "HCL Software",
          "product": "HCL Launch",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.0.0 - 7.0.52; 7.1.0.0 - 7.1.0.1.ifix01; 7.2.0.0 - 7.2.3.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-10-31T22:15:12.563",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101093",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101093",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@hcl.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-327"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-327"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages."
    },
    {
      "lang": "es",
      "value": "Las imágenes de HCL Launch Container proporcionadas contienen certificados HTTPS no únicos y una clave de cifrado de base de datos. La solución proporciona instrucciones y herramientas para reemplazar las claves y certificados no únicos. Esto no afecta a los paquetes de instalación estándar.\n"
    }
  ],
  "lastModified": "2026-06-17T03:45:27.053",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_launch_container_image:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D89713FC-E391-44F9-8A89-6466F9C47F0E",
              "versionEndIncluding": "7.0.52",
              "versionStartIncluding": "7.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_launch_container_image:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "368A31E7-06F9-48BD-91F7-DF6E83A0CA2F",
              "versionEndExcluding": "7.1.0.1",
              "versionStartIncluding": "7.1.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_launch_container_image:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91EF4F21-15CF-469C-9DA3-995F59BE8244",
              "versionEndIncluding": "7.2.3.0",
              "versionStartIncluding": "7.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_launch_container_image:7.1.0.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A38F863-2A52-48A4-AD62-1CB2CF41877F"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_launch_container_image:7.1.0.1:ifix01:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "510F07AB-AF74-491E-91EC-F1D29E7B509B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}