CVEvulnerability

CVE-2025-52661

5.3 MEDIUM Published 2026-01-19 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2026-01-19
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 2.4 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected]): 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses: CWE-613

Description

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

Affected configurations

• hcltech aion 2.0.0

Weakness · not in database (1)

CWE-613

References

https://support.hcl-software.com/kb_view.do?sys_kb_id=4b92474633de7ad4159a05273e5c7b4b&searchTerm=kb0127995# Vendor Advisory

CVE-2025-52661

Description

Affected configurations

Related

Weakness · not in database (1)

References