LOWCVSS v3.1 3.8Vulnerability
CVE-2026-21811
HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Epss score
- 0.00183
- Cvss severity
- LOW
- Cvss score
- 3.8
- Retrieved at
- 2026-10-22T22:17:34+00:00
- Last source
- FIRST EPSS
- Score
- 3.8
- Cvss version
- 3.1
- Cve id
- CVE-2026-21811
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
- First seen by Signal
- 2026-10-22T10:03:30+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
- Published at
- 2026-10-22T09:17:16.283
- Last modified
- 2026-10-22T17:36:46.950
- Epss percentile
- 0.07481
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph