2.7

CVE-2024-30146

HCL Domino Leap is affected by improper access control

Improper access control of endpoint in HCL Domino Leap
allows certain admin users to import applications from the
server's filesystem.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Domino Leap Version >= 1.1.3 < 1.1.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.097
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
psirt@hcl.com 4.1 0.7 3.4
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
Vendor Advisory