CVE-2024-30127
LOWDescription
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
Is your site exposed to CVE-2024-30127?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| hcltech | hcl_leap |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-30127? +
How severe is CVE-2024-30127? +
What products are affected by CVE-2024-30127? +
How do I check if I'm vulnerable to CVE-2024-30127? +
Related Vulnerabilities
An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control …
Typesense is a fast, typo-tolerant search engine. Prior to versions 29.1 and 30.2, there is a cache isolation issue affecting …
Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and …
Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant's OAuth …
Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static method always sets the Cache-Control header to …
Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results …