CVE-2025-55275

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability PUBLISHED

Description (CNA)

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.

Affected (CNA)

Vendor / product	Versions
HCL / Aftermarket DPC	affected version 1.0.0

CWE

CWE-557

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.