CVE-2023-37513
HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
HCL Software · HCL Traveler To DoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →