CVE-2025-62309

Description

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.

CVSS Details

CVSS Score

2.6

Severity

LOW

CVSS Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N

Configurations (Affected Products)

No configuration data available.

HCL AION (具体受影响版本请参考官方KB0130636)

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

<!-- Proof of Concept: Autocomplete enabled on sensitive field -->
<!-- This demonstrates the vulnerability where autocomplete is not disabled -->
<form action="https://example.com/hcl-aion/login" method="post">
    <!-- Vulnerable field: missing autocomplete="off" -->
    Username: <input type="text" name="username" /><br>
    Password: <input type="password" name="password" /><br>
    <input type="submit" value="Submit" />
</form>

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62309
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-62309
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-62309/
[4] VulDB https://vuldb.com/cve/CVE-2025-62309
[5] https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-62309", "sourceIdentifier": "[email protected]", "published": "2026-05-14T17:16:18.047", "lastModified": "2026-05-14T17:22:46.577", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N", "baseScore": 2.6, "baseSeverity": "LOW", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 0.9, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-201"}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636", "source": "[email protected]"}]}}