CVE-2024-30148: HCL Leap is affected by improper access control
Published Apr 24, 2025
·Updated
Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.
Affected Software
2 affected components
HCL Leap
hcltech Hcl Leap<9.3.8
Event History
Apr 24, 2025
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30148?
CVE-2024-30148 is categorized as a high severity vulnerability due to improper access control.
2
How do I fix CVE-2024-30148?
To fix CVE-2024-30148, ensure that proper access controls are implemented to restrict admin user capabilities.
3
Who is affected by CVE-2024-30148?
CVE-2024-30148 affects versions of HCL Leap that allow certain admin users to import applications improperly.
4
What type of vulnerability is CVE-2024-30148?
CVE-2024-30148 is an improper access control vulnerability.
5
What impact does CVE-2024-30148 have?
CVE-2024-30148 can allow unauthorized access to the server's filesystem, leading to potential data breaches.