CVE-2025-52640 — MEDIUM (4.7)

Vulnerability Description

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Related Weaknesses (CWE)

CWE-276

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084

FAQ

What is CVE-2025-52640?

CVE-2025-52640 is a vulnerability with a CVSS score of 4.7 (MEDIUM). HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or ...

How severe is CVE-2025-52640?

CVE-2025-52640 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-52640?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.