← Back

CVE-2025-31954

nvd nist
Published: Nov 5, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.

Affected (2)

Hcltech
1 product
Dryice Iautomate
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hcltech
Dryice Iautomate
Version 6.5.1
Dryice Iautomate
Version 6.5.2

Related CWEs

CWE-598
Use of GET Request Method With Sensitive Query Strings
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.