CVE-2025-62312: HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication
Published May 14, 2026
·Updated
HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.
Affected Software
1 affected component
HCL AION
Event History
May 14, 2026
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62312?
The severity of CVE-2025-62312 is considered high due to its impact on authentication security.
2
How do I fix CVE-2025-62312?
To fix CVE-2025-62312, implement more secure authentication mechanisms such as OAuth or token-based authentication.
3
What software is affected by CVE-2025-62312?
CVE-2025-62312 specifically affects HCL AION software.
4
What risks are associated with CVE-2025-62312?
CVE-2025-62312 poses risks of credential interception, leading to potential unauthorized access.
5
Is there a patch available for CVE-2025-62312?
As of now, specific patch information for CVE-2025-62312 has not been provided, so mitigation measures should be adopted.