Insufficient Session Expiration in HCL iAutomate Affecting Unauthorized Access

CVE-2025-31952

What is CVE-2025-31952?

HCL iAutomate suffers from an insufficient session expiration vulnerability that permits session tokens to remain valid indefinitely without manual revocation. This oversight significantly heightens the risk of unauthorized access, as attackers could exploit active sessions to gain rights to sensitive data and functionalities. Organizations utilizing HCL iAutomate should address this security weakness promptly to safeguard their systems and ensure robust session management protocols.

References