CVE-2025-52648

MEDIUM

4.8

Description

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system

CVE Details

CVSS v3.1 Score4.8

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

Published3/16/2026

Last Modified3/27/2026

Sourcenvd

Honeypot Sightings0

Affected Products

hcl:aion

Weaknesses (CWE)

CWE-347

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410(psirt@hcl.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.