-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
CVE Vulnerability Details :
CVE-2023-37516
PUBLISHED
More Info
Official Page
Assigner
-
HCL
Assigner Org ID
-
1e47fe04-f25f-42fa-b674-36de2c5e3cfc
View Known Exploited Vulnerability (KEV) details
Published At
-
24 Apr, 2025 | 20:37
Updated At
-
25 Apr, 2025 | 19:36
Rejected At
-
▼
CVE Numbering Authority (CNA)
HCL Leap is affected by missing "no cache" headers
Missing "no cache" headers in HCL Leap permits user directory information to be cached.
Affected Products
Vendor
HCL Technologies Ltd.
HCL Software
Product
HCL Leap
Default Status
unaffected
Versions
Affected
< 9.3.4
Problem Types
Type
CWE ID
Description
CWE
CWE-524
CWE-524 Use of Cache Containing Sensitive Information
Type:
CWE
CWE ID:
CWE-524
Description:
CWE-524 Use of Cache Containing Sensitive Information
Metrics
Version
Base score
Base severity
Vector
3.1
3.2
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Version:
3.1
Base score:
3.2
Base severity:
LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
N/A
Hyperlink:
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
Resource:
N/A
▼
Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
Details not found