4.1

CVE-2024-30148

HCL Leap is affected by improper access control

Improper access control of endpoint in HCL Leap
allows certain admin users to import applications from the
server's filesystem.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Leap Version < 9.3.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.179
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@hcl.com 4.1 0.7 3.4
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
Vendor Advisory