CVE-2025-52661 — HCL Software / AION

CVE-2025-52661

HCL Software / AION PUBLISHED

Description (CNA)

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

Affected (CNA)

Vendor / product	Versions
HCL Software / AION	affected 2

CWE

CWE-613

References

https://support.hcl-software.com/kb_view.do?sys_kb_id=4b92474633de7ad4159a05273e5c7b4b&searchTerm=kb0127995#

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.