CVE-2025-0279

{"id": "CVE-2025-0279", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-04-03T22:15:16.700", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120336", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks."}, {"lang": "es", "value": "HCL Traveler genera mensajes de error que proporcionan informaci\u00f3n detallada sobre errores y fallos, como rutas internas, nombres de archivo, tokens confidenciales, credenciales, c\u00f3digos de error o seguimientos de pila. Los atacantes podr\u00edan explotar esta informaci\u00f3n para obtener informaci\u00f3n sobre la arquitectura del sistema y, potencialmente, lanzar ataques dirigidos."}], "lastModified": "2025-10-10T16:47:02.997", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:traveler:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88054BA7-F9D1-41E4-AEA8-D362CEB4A4CC", "versionEndIncluding": "14.0.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}