CVE-2023-37516
LOWDescription
Missing "no cache" headers in HCL Leap permits user directory information to be cached.
Is your site exposed to CVE-2023-37516?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| hcltech | hcl_leap |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2023-37516? +
How severe is CVE-2023-37516? +
What products are affected by CVE-2023-37516? +
How do I check if I'm vulnerable to CVE-2023-37516? +
Related Vulnerabilities
Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and …
An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control …
Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static method always sets the Cache-Control header to …
Typesense is a fast, typo-tolerant search engine. Prior to versions 29.1 and 30.2, there is a cache isolation issue affecting …
Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant's OAuth …
Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results …