CVE-2025-55266

HCL Aftermarket DPC is affected by Session Fixation PUBLISHED

Description (CNA)

HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carry out unauthorized transaction behalf of the user.

Affected (CNA)

Vendor / product	Versions
HCL / Aftermarket DPC	affected version 1.0.0

CWE

CWE-384

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.