CVE-2023-45720

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:hcl_leap:*:*:*:*:*:*:*:*
History

17 Nov 2025, 21:47

Type Values Removed Values Added
First Time Hcltech hcl Leap
CPE cpe:2.3:a:hcltech:leap:*:*:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_leap:*:*:*:*:*:*:*:*

29 Oct 2025, 15:48

Type Values Removed Values Added
First Time Hcltech
Hcltech leap
CPE cpe:2.3:a:hcltech:leap:*:*:*:*:*:*:*:*
References () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900 - () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900 - Vendor Advisory

29 Apr 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) La configuración predeterminada insuficiente en HCL Leap permite el acceso anónimo a la información del directorio.

24 Apr 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-24 17:15

Updated : 2025-11-17 21:47

NVD link : CVE-2023-45720

Mitre link : CVE-2023-45720

CVE.ORG link : CVE-2023-45720

JSON object : View

Products Affected

hcltech

  • hcl_leap
CWE
CWE-359

Exposure of Private Personal Information to an Unauthorized Actor