CVE-2023-37517: HCL Domino Volt and Domino Leap are affected by missing "no cache" headers
Published Apr 30, 2025
·Updated
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
Affected Software
3 affected components
HCL Domino Volt
HCL Domino Leap
hcltech Domino Leap>=1.1<1.1.2
Event History
Apr 30, 2025
CVE Published
via MITRE·09:11 PM
Data Sourced
via MITRE·09:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37517?
CVE-2023-37517 has a moderate severity rating due to the potential exposure of sensitive data.
2
How do I fix CVE-2023-37517?
To fix CVE-2023-37517, ensure that 'no cache' headers are implemented correctly in HCL Leap and Domino Volt.
3
What types of data are affected by CVE-2023-37517?
CVE-2023-37517 can result in sensitive data being cached, which may include user information and application data.
4
Which software versions are vulnerable to CVE-2023-37517?
CVE-2023-37517 affects HCL Domino Leap and HCL Domino Volt in all versions.
5
When was CVE-2023-37517 disclosed?
CVE-2023-37517 was disclosed in 2023 as a vulnerability affecting HCL software products.