CVE-2024-30146: HCL Domino Leap is affected by improper access control
Published Apr 30, 2025
·Updated
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.
Affected Software
2 affected components
HCL Domino Leap
hcltech Domino Leap>=1.1.3<1.1.5
Event History
Apr 30, 2025
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30146?
CVE-2024-30146 is classified as a medium severity vulnerability due to improper access control.
2
How do I fix CVE-2024-30146?
To fix CVE-2024-30146, ensure proper access controls are implemented for admin users in HCL Domino Leap.
3
Who is affected by CVE-2024-30146?
CVE-2024-30146 affects HCL Domino Leap installations where certain admin users have unauthorized application import permissions.
4
What are the risks associated with CVE-2024-30146?
The risks of CVE-2024-30146 include unauthorized access and potential application compromise on HCL Domino Leap.
5
Is there a patch available for CVE-2024-30146?
Yes, HCL has provided guidance on remediation for CVE-2024-30146 in their knowledge base.