CVE-2021-27785CWE-522

HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

Low · published July 29, 2022

CVSS v3.1
3.9
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-07-29T23:55Z
EPSS history
Timeline
  • 29 JUL 23:55Z
    HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)
    cvelistv5