CVE-2025-52640 | BDVDB-2026-358570 Detail
HCL SoftwareAION
Description#
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-276 Incorrect Default Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.