CVEvulnerability

CVE-2025-52623

6.5 MEDIUM Published 2026-02-03 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-02-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weaknesses
CWE-522

Description

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.

Affected configurations

• hcltech aion 2.0.0

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References