Impact
This vulnerability in HCL Traveler for Microsoft Outlook (HTMO) allows an attacker to obtain sensitive application information, which could lead to further attacks or unpredictable behavior within the application. The disclosed weakness exposes data that should be protected, thereby compromising confidentiality. The CVE description explicitly notes that the vulnerability could permit exploitation of application information.
Affected Systems
The affected product is HCLSoftware Traveler for Microsoft Outlook. No specific version range was supplied in the available data, so all installations of the indicated product may be susceptible until a patch is available.
Risk and Exploitability
The CVSS score of 5.5 categorizes the issue as medium severity. The EPSS value is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating that, as of the latest information, there is no known widespread exploitation. The attack vector is not specified in the description; it is inferred that the vulnerability could be exploited by an attacker with access to the application or by leveraging information leakage, but no explicit remote vector is stated. Overall, the risk is moderate, primarily due to the data leakage potential rather than an immediate remote exploitation pathway.
OpenCVE Enrichment