Description
Missing "no cache" headers in HCL Leap permits user directory information to be cached.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.4 | — |
Low · 3.2
CVE-2023-37516
EUVD-2023-41403GHSA-r77m-qpx3-mpgm
HCL Leap is affected by missing "no cache" headers
Published Apr 24, 2025 · Updated Apr 25, 2025 · Assigned by HCL