CVE-2020-4083 Information disclosure in "HCL Connections"
A local user can access sensitive information leaked through trace logs in HCL Connections, requiring log configuration changes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-4083?
CVE-2020-4083 is a medium-severity vulnerability in "HCL Connections", published on 5 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user.
Weakness: CWE-532
Which versions are affected by CVE-2020-4083?
It affects 1 product.
Products include Hcltech Connections.
How do I fix CVE-2020-4083?
No fix has been published for CVE-2020-4083 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-4083 being exploited?
There is no known exploitation of CVE-2020-4083 in the wild and no public exploit code.
Other vulnerabilities in "HCL Connections"
- CVE-2020-4085 Information disclosure in "HCL Connections"
- CVE-2019-4209 Open redirect in HCL Connections
- CVE-2023-28018 HCL Connections s vulnerable to possible denial of service for certain users
- CVE-2026-21788 HCL Connections is vulnerable to cross-site scripting (XSS)
- CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
Sources
Also known as GHSA-cgfh-7jxj-w8w8.