HCL HCL DevOps Deploy/HCL Launch up to 7.3.2.18/8.0.1.13/8.1.2.6/8.2.1.0 log file

Summaryinfo

A vulnerability was found in HCL HCL DevOps Deploy and HCL Launch up to 7.3.2.18/8.0.1.13/8.1.2.6/8.2.1.0. It has been rated as problematic. This vulnerability affects unknown code. Performing a manipulation results in log file. This vulnerability is cataloged as CVE-2026-56457. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in HCL HCL DevOps Deploy and HCL Launch up to 7.3.2.18/8.0.1.13/8.1.2.6/8.2.1.0. This affects an unknown function. The manipulation with an unknown input leads to a log file vulnerability. CWE is classifying the issue as CWE-532. Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. This is going to have an impact on confidentiality. The summary by CVE is:

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step.

It is possible to read the advisory at support.hcl-software.com. This vulnerability is uniquely identified as CVE-2026-56457 since 06/22/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• HCL

Name

• HCL DevOps Deploy
• HCL Launch

Version

• 7.3.2.0
• 7.3.2.1
• 7.3.2.2
• 7.3.2.3
• 7.3.2.4
• 7.3.2.5
• 7.3.2.6
• 7.3.2.7
• 7.3.2.8
• 7.3.2.9
• 7.3.2.10
• 7.3.2.11
• 7.3.2.12
• 7.3.2.13
• 7.3.2.14
• 7.3.2.15
• 7.3.2.16
• 7.3.2.17
• 7.3.2.18
• 8.0.1.0
• 8.0.1.1
• 8.0.1.2
• 8.0.1.3
• 8.0.1.4
• 8.0.1.5
• 8.0.1.6
• 8.0.1.7
• 8.0.1.8
• 8.0.1.9
• 8.0.1.10
• 8.0.1.11
• 8.0.1.12
• 8.0.1.13
• 8.1.2.0
• 8.1.2.1
• 8.1.2.2
• 8.1.2.3
• 8.1.2.4
• 8.1.2.5
• 8.1.2.6
• 8.2.0
• 8.2.1.0

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion