CVE-2026-56609

6.5 Moyenne

Publiée le 03/08/2026 à 15:18 · Modifiée le 05/08/2026 à 16:56 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Traduire en français

Produits concernés

HCL Software HCL iControl
Hcltech icontrol

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.8 Moyenne	psirt@hcl.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N`
3.1	6.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-327

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories