HCL AION Permanent Cookie Vulnerability Allowing Sensitive Session Information Exposure

A vulnerability exists in HCL AION version 2.0, where sensitive session data is stored in permanent cookies. This practice increases the risk of unauthorized access if the cookies are intercepted or compromised.

Impact

Exploitation of this vulnerability could lead to unauthorized access by allowing interception or compromise of sensitive session information stored in cookies.

Remediation

Users can upgrade to HCL AION version 2.1.0, which addresses this vulnerability. For assistance with the upgrade, contact the HCL AION Product support team.