CVE-2025-52633 — HCL AION is susceptible to Missing Content-Security-Policy

CVE-2025-52633

HCL AION is susceptible to Missing Content-Security-Policy PUBLISHED

Description (CNA)

HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies may increase the risk of unauthorized access if the cookies are intercepted or compromised. This issue affects AION: 2.0.

Affected (CNA)

Vendor / product	Versions
HCL / AION	affected 2.0

CWE

CWE-539

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127972

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.