CVE-2023-45720 - HCL Leap is affected by a disclosure of private personal information vulnerability

MEDIUM

HCL Leap is affected by a disclosure of private personal information vulnerability

Published Apr 24, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.31%

Insufficient default configuration in HCL Leap allows anonymous access to directory information.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
< 9.3.5	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-359

Link	Providers	Tags
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900		Vendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner HCL

Published Apr 24, 2025

Updated Apr 24, 2025

Reserved Oct 10, 2023

Updated Apr 24, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a