CNNVD-202510-1461 Information

CNNVD ID

CNNVD-202510-1461

CVE-2025-52625

  • CNNVD Published: 2025-10-10

Description (Chinese)

HCL AION是印度HCL公司的一款AI生命周期管理平台。 HCL AION 2.0版本存在安全漏洞,该漏洞源于SSL页面可缓存,可能导致凭据、系统标识符或内部文件路径泄露。

Description (English)

HCL AION is an AI life-cycle management platform for HCL India. There is a security loophole in HCL AION version 2.0, which originates from the cache of the SSL page and may lead to the leakage of the certificate, the system identifier or the internal file path.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

HCL

Published

2025-10-10

Last Modified

2026-02-24

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444

Patch

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444

Share on: