Base Score

MEDIUM5.5

CVE-2024-42197

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.

VectorLOCAL

Published Bypsirt@hcl.com

Published DateDec 11, 2025, 20:15

Weakness Type (CWE):CWE-256

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

NONE

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127448

Base Score

MEDIUM5.5

Weakness Type (CWE):CWE-256

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

NONE