CVE-2023-37513 LOW

CVE-2023-37513: HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher

Vendor Hcl Software
Product HCL Traveler To Do
Published August 11, 2023
Last update October 4, 2024
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.

Key dates

02Disclosure timeline

August 11, 2023 CVE published
October 4, 2024 Record updated