CVE-2024-23571
- State
- Published
- Severity
- 4.3 Medium
- Published
- Jul 17, 2026
- Updated
- Jul 17, 2026
- Reserved
- Jan 18, 2024
Description
HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local cache, then this may be retrieved by other users who have access to the same computer at a future time.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-525 Use of Web Browser Cache of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Aftermarket EPCHCLSoftware |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.