CVE-2025-62308

Published: May 14, 2026Modified: Jun 17, 2026Deferred

5.1

Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Exploitability: 0.9 / Impact: 3.7

Source: psirt@hcl.com (Secondary)

Description

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details, which may potentially assist in further analysis or targeted actions under certain conditions

Related CWEs

CWE-201

Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Source: psirt@hcl.com

Timeline

No history available yet.