Sensitive Data Exposure in HCL Leap due to Missing Cache Control Headers

CVE-2023-37517

What is CVE-2023-37517?

HCL Leap is affected by a vulnerability that allows sensitive data to be cached inappropriately due to missing 'no cache' headers. This oversight could lead to unauthorized access to confidential information, underscoring the importance of proper cache control mechanisms to safeguard sensitive data during transmission and storage. Organizations using HCL Leap must take immediate action to address this vulnerability to protect their data integrity and maintain compliance.

References