CVE-2025-52633HCL AION is susceptible to Missing Content-Security-Policy

Description

HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies may increase the risk of unauthorized access if the cookies are intercepted or compromised. This issue affects AION: 2.0.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127972 Vendor Advisory