CVE-2023-37516CWE-524

HCL Leap is affected by missing "no cache" headers

Low · published April 24, 2025

CVSS v3.1

3.2

EPSS

0%

Percentile

4.6

In the wild

Unconfirmed

What it is

Missing "no cache" headers in HCL Leap permits user directory information to be cached.

The record

Technical detail

CVSS v3.1: 3.2 · LOW
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00158 · 4.6th percentile
Weakness: CWE-524 · Use of Cache Containing Sensitive Information
Published: 2025-04-24T20:37Z

EPSS history

Timeline

24 APR 20:37Z
HCL Leap is affected by missing "no cache" headers
cvelistv5