CVE-2025-52648 | BDVDB-2026-320660 Detail
HCLAION
Description#
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-347 Improper Verification of Cryptographic Signature
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.