HCL AION Sensitive Information Exposure Vulnerability

A vulnerability allowing the exposure of sensitive information to unauthorized users has been identified in HCL AION version 2.0. This issue arises from the absence or improper implementation of the 'X-Content-Type-Options' header, which can lead to the disclosure of sensitive data such as credentials or system information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, including credentials and system details.

Remediation

This vulnerability has been addressed in HCL AION version 2.0.1. Customers using earlier versions should upgrade to 2.0.1. For assistance with the upgrade process, contact the HCL AION Product support team.