7.1
Élevée
CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration
Description
HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iAutomate | 6.5.1 | Pas de correctif indiqué |
Autres CVE de iAutomate
Les 5 CVE de iAutomate →
CVE-2025-31954
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure
5.4
Moyenne
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
7.6
Élevée
CVE-2025-31953
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if…
7.1
Élevée
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability
5.5
Moyenne