CVE-2023-37513

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
HCL Software	HCL Traveler To Do	< 12.0.6

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106692Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106692Vendor Advisory

Timeline

Published: Aug 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-375163.2Missing "no cache" headers in HCL Leap permits user directory information to be cached.CVE-2023-375177.5Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2023-375188.8HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute wi CVE-2023-375196.1Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report, which is served by CVE-2023-37526.1A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functio CVE-2023-375206.1Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data e CVE-2023-375215.3HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could all CVE-2023-375229.8HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malici CVE-2023-375239.8Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a maliciou CVE-2023-375247.8HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Fram CVE-2023-375255.3A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may CVE-2023-375266.5HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS miscon