EUVD-2026-64893
GHSA-g92m-84fg-5m4g
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vendor description explicitly cites DoS as an impact, warranting A:L; all other metrics mirror the supplied vector for unauthenticated network exploitation with no scope change.
Primary rating from Vendor (HCL).
CVSS VectorVendor: HCL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
1DescriptionCVE.org
HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service.
AnalysisAI
HCL Hive 1.0 exposes its authentication endpoint without rate limiting, enabling unauthenticated remote attackers to conduct brute-force or credential stuffing attacks that can lead to unauthorized account access, or to flood the endpoint causing a denial of service. Classified under CWE-307 (Improper Restriction of Excessive Authentication Attempts), the flaw requires no privileges or user interaction and is network-accessible against default deployments. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special configuration is required for exploitation - the vulnerability exists in any default deployment of HCL Hive 1.0 with a network-reachable authentication endpoint. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 5.3 (Medium) vector - AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - reflects easy, unauthenticated network exploitation with low complexity, but rates availability impact as None, which conflicts directly with the vendor's own description citing denial of service as a potential consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patch or configuration fix described in the HCL Software vendor advisory at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 - no specific fixed version number is available from the provided intelligence data and should be confirmed directly via the advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthorized system access in HCL Hive results from the product bundling third-party components that contain publicly do
Incorrect default permissions in HCL Hive 1.0 expose containerized deployments to unauthorized lateral movement, contain
HCL Hive employs a risky cryptographic primitive (CWE-1240) that creates systemic trust failure across the platform: if
Broken access control in HCL Hive 1.0 allows a high-privileged network attacker to bypass code verification gates and in
Insufficient access control granularity in HCL Hive's Keycloak IAM instance exposes protected resources to unauthenticat
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTT
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today