Sensitive Information Disclosure in HCL iAutomate by HCL Technologies

CVE-2025-31954

What is CVE-2025-31954?

HCL iAutomate versions 6.5.1 and 6.5.2 are vulnerable to sensitive information disclosure. The issue arises from an HTTP GET request that exposes sensitive data within its query string. This flaw could allow unauthorized users to access critical resources or sensitive information, creating potential security risks for affected systems. Organizations utilizing these versions should consider immediate mitigation steps to protect their information.

References