HCL AION Root File System Not Mounted as Read-Only Vulnerability

A vulnerability exists in HCL AION version 2.0, where the root file system is not mounted as read-only. This misconfiguration can lead to unintended modifications of critical system files, increasing the risk of system compromise or unauthorized changes.

Impact

Allowing unintended modifications to critical system files could lead to unauthorized changes or a system compromise.

Remediation

Users can upgrade to HCL AION version 2.1.0, which addresses this vulnerability. For assistance with the upgrade, contact the HCL AION Product support team.