5.4
Moyenne
CVE-2025-31954 HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure
Description
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iAutomate | Versions non publiées |
Autres CVE de iAutomate
Les 5 CVE de iAutomate →
CVE-2025-31952
HCL iAutomate is affected by an insufficient session expiration
7.1
Élevée
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
7.6
Élevée
CVE-2025-31953
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if…
7.1
Élevée
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability
5.5
Moyenne