CVE-2025-55264 — HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change

CVE-2025-55264

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change PUBLISHED

Description (CNA)

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.

Affected (CNA)

Vendor / product	Versions
HCL / Aftermarket DPC	affected version 1.0.0

CWE

CWE-613

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.