CVE-2025-52634: HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed
Published Oct 10, 2025
·Updated
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.
Affected Software
2 affected components
HCL AION
hcltech Aion=2.0.0
Event History
Oct 10, 2025
CVE Published
via MITRE·09:40 AM
Data Sourced
via MITRE·09:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52634?
CVE-2025-52634 has a moderate severity level due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2025-52634?
To fix CVE-2025-52634, ensure that you are using the latest version of HCL AION and review the sensitive data exposure settings.
3
What type of information is exposed in CVE-2025-52634?
CVE-2025-52634 may lead to the exposure of sensitive information that could be exploited by unauthorized actors.
4
Who is affected by CVE-2025-52634?
CVE-2025-52634 affects users of HCL AION version 2.0 and potentially any installations utilizing this outdated version.
5
Is there a workaround for CVE-2025-52634?
While upgrading is the recommended solution, temporarily restricting access to sensitive data can serve as a workaround for CVE-2025-52634.