CVE-2025-31954 — HCL iAutomate is susceptible to a sensitive information disclosure

CVE-2025-31954

HCL iAutomate is susceptible to a sensitive information disclosure PUBLISHED

Description (CNA)

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.

Affected (CNA)

Vendor / product	Versions
HCL Software / iAutomate	affected 6.5.1, 6.5.2

CWE

CWE-598

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0125011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.