Insecure Authentication in HCL AION by HCL Technologies

CVE-2025-62312

What is CVE-2025-62312?

HCL AION is prone to a vulnerability that utilizes basic authorization tokens for user authentication. This mechanism, if not paired with secure transmission practices, can expose user credentials, making them susceptible to interception or misuse. Organizations using HCL AION should implement stronger authentication measures and secure communication protocols to mitigate potential risks associated with this vulnerability.

References