CNNVD-202510-1468 Information

CNNVD ID

CNNVD-202510-1468

CVE-2025-52632

  • CNNVD Published: 2025-10-10

Description (Chinese)

HCL AION是印度HCL公司的一款AI生命周期管理平台。 HCL AION 2.0版本存在安全漏洞,该漏洞源于加密会话SSL Cookie缺少安全属性。

Description (English)

HCL AION is an AI life-cycle management platform for HCL India. Version 2.0 of HCL AION has a security loophole, which stems from the lack of security attributes for encrypted session SSL Cookie.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

HCL

Published

2025-10-10

Last Modified

2026-02-24

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444

Patch

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444

Share on: