3.7Düşük

CVE-2025-52623HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

HCL AION Yayım: (9 ay önce)

Açıklama

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.

Zayıflık türü (CWE): CWE-522

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
HCL AION 2.0
hcltech aion 2.0.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (1)

  • cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*