5.5Medium

CVE-2025-52627HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource

HCL AION Published: (9 months ago)

Description

Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0.

Weakness (CWE): CWE-732

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
HCL AION 2.0
hcltech aion 2.0.0

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*