HCL iAutomate Insufficient Session Expiration Vulnerability Allowing Unauthorized Access

A vulnerability exists in HCL iAutomate version 6.5.1 due to insufficient session expiration, allowing tokens to remain valid indefinitely unless manually revoked. This flaw increases the risk of unauthorized access.

Impact

Exploitation of this vulnerability could lead to unauthorized access, as valid tokens can be used to gain access to the system indefinitely.

Remediation

Users can upgrade to HCL iAutomate version 6.5.2, which addresses this vulnerability. Assistance with the upgrade process is available from the HCL iAutomate support team.