HCL AION Exposure of Sensitive Information Vulnerability

A vulnerability allowing the exposure of sensitive information to unauthorized actors exists in HCL AION version 2.0. This issue was identified during a Dynamic Application Security Testing assessment, which revealed that certain system endpoints may be inadequately protected, potentially allowing unauthorized access to sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as credentials or system details.

Remediation

Users can upgrade to HCL AION version 2.0.1, which addresses this vulnerability. For assistance with the upgrade process, contact the HCL AION Product support team.