CVE-2025-62312

Published: May 14, 2026Modified: Jun 17, 2026Deferred

3.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.5 / Impact: 1.4

Source: psirt@hcl.com (Secondary)

Description

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Source: psirt@hcl.com

Timeline

No history available yet.