← Back

CVE-2025-62299

nvd nist
Published: Aug 20, 2026Modified: Aug 28, 2026Deferred

JSON object

Loading...
6.6
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N
Exploitability: 1.3 / Impact: 4.7
Source: psirt@hcl.com (Secondary)

Description

HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.

Related CWEs

CWE-272
Least Privilege Violation
The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.

References (1)

Source: psirt@hcl.com

Timeline

No history available yet.