CVE-2025-62309: HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.
HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable auto-complete for the affected input fields to prevent sensitive information from being stored in the browser.
HCL AION auto-complete functionality = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62309?
The severity of CVE-2025-62309 is classified as medium due to the potential exposure of sensitive information.
How do I fix CVE-2025-62309?
To fix CVE-2025-62309, disable the auto-complete functionality for affected input fields in HCL AION.
What types of sensitive information are at risk with CVE-2025-62309?
CVE-2025-62309 may risk sensitive information such as usernames, passwords, and other personal data being stored in the browser.
Which versions of HCL AION are affected by CVE-2025-62309?
CVE-2025-62309 affects all versions of HCL AION where auto-complete functionality is enabled on specific input fields.
What should I do if I can't disable auto-complete for CVE-2025-62309?
If auto-complete cannot be disabled for CVE-2025-62309, consider using an alternative input method or implementing additional security measures.