CVE-2025-52659: HCL AION is affected by a Cacheable HTTP Response vulnerability
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52659?
CVE-2025-52659 has been classified as a moderate severity vulnerability due to the potential for unauthorized access or information disclosure.
How do I fix CVE-2025-52659?
To mitigate CVE-2025-52659, you should configure your HTTP response headers to prevent caching of sensitive or dynamic content.
What systems are affected by CVE-2025-52659?
CVE-2025-52659 specifically affects HCL AION version 2.
What potential risks does CVE-2025-52659 pose?
CVE-2025-52659 may lead to the unintended storage of sensitive content, which can result in information disclosure if accessed by unauthorized users.
Is there a patch available for CVE-2025-52659?
At this time, there is no specific patch mentioned for CVE-2025-52659; users are advised to apply best practices in HTTP header configurations.