CVE-2025-52623: HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52623?
CVE-2025-52623 has a moderate severity level due to potential exposure of sensitive information from password fields.
How do I fix CVE-2025-52623?
To fix CVE-2025-52623, disable the autocomplete attribute for password fields in your HTML forms.
What impact does CVE-2025-52623 have on my application?
CVE-2025-52623 can lead to unintended storage or disclosure of passwords, compromising user security.
Which versions of HCL AION are affected by CVE-2025-52623?
CVE-2025-52623 affects all versions of HCL AION that do not have the autocomplete attribute disabled for password fields.
Is CVE-2025-52623 related to other vulnerabilities in HCL AION?
CVE-2025-52623 is specific to the autocomplete HTML attribute but may be part of broader security concerns if not addressed.