EUVD-2026-64855
GHSA-3c3q-fqq7-42mj
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Network-reachable weak primitive (AV:N), but exploitation requires cryptographic positioning (AC:H); no auth needed (PR:N); credential leakage and lateral compromise drive C:H/I:H; no availability impact described.
Primary rating from Vendor (HCL).
CVSS VectorVendor: HCL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
2DescriptionCVE.org
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached.
AnalysisAI
HCL Hive employs a risky cryptographic primitive (CWE-1240) that creates systemic trust failure across the platform: if any single internal component is compromised, an attacker can exploit the weak cryptographic construction to achieve unauthorized lateral movement or harvest credentials at scale. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) indicates the flaw is reachable over the network without authentication, though high attack complexity caps opportunistic risk. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The primary exploitation prerequisite is an initial breach of at least one internal HCL Hive component - the CVE description explicitly frames impact as conditional on this internal foothold. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.4 score reflects high confidentiality and integrity impact (C:H/I:H) but is tempered by high attack complexity (AC:H), which materially reduces real-world exploitability compared to a 9.x critical. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult and apply guidance from the HCL Software advisory at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731; no exact patched version is confirmed from currently available data, so monitor the advisory for a fix release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, activate enhanced monitoring for suspicious internal lateral movement and unusual privilege escalation patterns; conduct emergency audit of all internal HCL Hive components for signs of compromise. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Incorrect default permissions in HCL Hive 1.0 expose containerized deployments to unauthorized lateral movement, contain
Unauthorized system access in HCL Hive results from the product bundling third-party components that contain publicly do
Broken access control in HCL Hive 1.0 allows a high-privileged network attacker to bypass code verification gates and in
HCL Hive 1.0 exposes its authentication endpoint without rate limiting, enabling unauthenticated remote attackers to con
Insufficient access control granularity in HCL Hive's Keycloak IAM instance exposes protected resources to unauthenticat
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTT
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today