CVE-2024-23568 describes an information exposure vulnerability in HCL Aftermarket EPC where the web server reveals the software version in use. This disclosure can assist attackers in determining which vulnerabilities may be present if the software version is outdated or unpatched. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

The exposure of the server software version does not directly compromise confidentiality, integrity, or availability but can facilitate targeted attacks by providing attackers with information about potential vulnerabilities. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to availability (low).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided, organizations should consider limiting access to version information through web server configuration or other means to reduce information leakage.