CVE-2026-21783
Medium
Description
HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.
SeverityMedium
CVSS4.3
Exploit probability22. percentile0.3%
ProductHcltech Traveler
PublishedMar 24, 2026
First seenMar 24, 2026
Weakness typeCWE-209CWE-209
How to fix
Update
- hcltech traveler14.5.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hcltech traveler | v < 14.5.1.0 | 14.5.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.