VULNERABILITY INTELLIGENCE

CVE-2025-62312

CVSS score3 LOW
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-05-14
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references