CVE-2025-62342

Published: Aug 27, 2026Modified: Aug 28, 2026Deferred

6.4

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:H

Exploitability: 1.2 / Impact: 5.2

Source: psirt@hcl.com (Secondary)

Description

HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion.

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131777

Source: psirt@hcl.com

Timeline

No history available yet.