HCL AION Cacheable SSL Page Vulnerability

A vulnerability allowing cached SSL pages to expose sensitive information has been identified in HCL AION version 2.0. This issue arises because cached data may reveal credentials, system identifiers, or internal file paths to attackers with access to the device or browser.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive information such as credentials, system identifiers, or internal file paths.

Remediation

This vulnerability has been fixed in HCL AION version 2.0.1. Customers using older versions should upgrade to 2.0.1, and the HCL AION Product support team will assist with the upgrade process.