HCL AION Audit Logging Vulnerability

A vulnerability exists in HCL AION version 2.0, where certain user actions are not properly audited or logged. This lack of adequate auditing may decrease the traceability of user activities, potentially affecting monitoring, accountability, and incident investigation processes.

Impact

The vulnerability could lead to reduced accountability and traceability of user actions, complicating monitoring and incident response efforts.

Remediation

Users can upgrade to HCL AION version 2.1.2, which addresses this vulnerability. For assistance with the upgrade, contact the HCL AION support team.