CVE-2025-31954: Dryice Iautomate: güvenlik açığı

Açıklama (NVD)

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.

Özet bilgiler

Ürün

Hcltech Dryice Iautomate

CVSS v3.1

4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,20 (yüzdelik 9)

CWE

CWE-598

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.hcl-software.com
• CWE-598