CVE-2025-62309: HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.
HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62309?
The severity of CVE-2025-62309 is classified as medium due to the potential exposure of sensitive information.
How do I fix CVE-2025-62309?
To fix CVE-2025-62309, disable the auto-complete functionality for affected input fields in HCL AION.
What types of sensitive information are at risk with CVE-2025-62309?
CVE-2025-62309 may risk sensitive information such as usernames, passwords, and other personal data being stored in the browser.
Which versions of HCL AION are affected by CVE-2025-62309?
CVE-2025-62309 affects all versions of HCL AION where auto-complete functionality is enabled on specific input fields.
What should I do if I can't disable auto-complete for CVE-2025-62309?
If auto-complete cannot be disabled for CVE-2025-62309, consider using an alternative input method or implementing additional security measures.