Description
Improper access control of endpoint in HCL Leap
allows certain admin users to import applications from the
server's filesystem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.8 | — |
Medium · 4.1
CVE-2024-30148
EUVD-2024-28084GHSA-3c2j-rv98-w4xf
HCL Leap is affected by improper access control
Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by HCL