7.1
High
CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration
Description
HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iAutomate | 6.5.1 | No fix stated |
Other CVEs of iAutomate
The 5 CVEs of iAutomate →
CVE-2025-31954
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure
5.4
Medium
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
7.6
High
CVE-2025-31953
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if…
7.1
High
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability
5.5
Medium