CVE-2026-21783CWE-209

HCL Traveler is affected by sensitive information disclosure

Medium · published March 24, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

HCL Traveler is affected by sensitive information disclosure.  The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces.  Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-03-24T19:48Z
EPSS history
Timeline
  • 24 MAR 19:48Z
    HCL Traveler is affected by sensitive information disclosure
    cvelistv5