HCL AION Model Authenticity Verification Vulnerability

A vulnerability exists in HCL AION version 2.0, where the model packaging and distribution processes lack adequate authenticity verification. This deficiency may allow unverified or altered model artifacts to be utilized, potentially leading to integrity issues or unintended behaviors within the application.

Impact

Exploitation of this vulnerability could result in the use of unverified or modified model artifacts, raising integrity concerns and the possibility of unexpected behaviors in the application.

Remediation

Users can upgrade to HCL AION version 2.1.2, which addresses this vulnerability. For assistance with the upgrade process, contact the HCL AION support team.