CVE-2026-21812

Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

State: Published
Severity: 2.2 Low
Published: Oct 22, 2026
Updated: Oct 22, 2026
Reserved: Jan 5, 2026

Description

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.

Scores

CVSS	Score	Vector	Source
3.1	2.2 Low	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N	HCL

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
AppScan Integration with Azure Boards for ASoC & A360HCL Software	Version 1.0.0Affected

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134539

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.