CNNVD-202601-3015 Information

CNNVD ID

CNNVD-202601-3015

CVE-2025-55252

  • CNNVD Published: 2026-01-19

Description (Chinese)

HCL AION是印度HCL公司的一款AI生命周期管理平台。 HCL AION 2版本存在安全漏洞,该漏洞源于弱密码策略,可能允许使用易于猜测的密码,造成未经授权的访问。

Description (English)

HCL AION is an AI life-cycle management platform for HCL India. There is a security loophole in HCL AION 2 that stems from a weak password strategy, which may allow the use of easily guessable passwords and result in unauthorized access.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

HCL

Published

2026-01-19

Last Modified

2026-02-24

References

https://support.hcl-software.com/kb_view.do?sys_kb_id=4b92474633de7ad4159a05273e5c7b4b&searchTerm=kb0127995# https://access.redhat.com/security/cve/cve-2025-55252

Patch

https://www.hcl-software.com/aion

Share on: