CVE-2025-31997: HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)
HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31997?
CVE-2025-31997 has been classified as a high-severity vulnerability due to its potential for unauthorized data access.
How do I fix CVE-2025-31997?
To remediate CVE-2025-31997, implement proper authorization checks on all direct object references to ensure only authorized users can access resources.
Which software is affected by CVE-2025-31997?
CVE-2025-31997 affects the HCL Unica Centralized Offer Management software.
What are the risks associated with CVE-2025-31997?
The risks of CVE-2025-31997 include unauthorized access to sensitive information such as database records and files.
Can CVE-2025-31997 be exploited remotely?
Yes, an attacker can exploit CVE-2025-31997 remotely by bypassing authorization controls via Insecure Direct Object References.