← Zurück zur CVE-Suche

CVE-2026-21766

Beschreibung

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default login portlet.

CVSS 5.4EPSS 0.181%Risiko 0.55
Quelle öffnen
Veröffentlicht
2026-08-05 20:17:08
Zuletzt geändert
2026-08-06 14:16:36
Vektor
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N