CVE-2025-68833: HCL Hive is affected by use of a cryptographic primitive with a risky implementation
Published Aug 24, 2026
·Updated
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.
Affected Software
2 affected components
HCL Hive Keycloak IAM Instance
HCL Hive
Event History
Aug 24, 2026
CVE Published
via MITRE·01:42 PM
Data Sourced
via MITRE·01:42 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vector indicates that exploitation can be performed remotely and does not require prior privileges or user interaction. An attacker could potentially obtain unauthorized access to resources because access controls lack sufficient granularity.
2
What is the expected impact if exploitation succeeds?
The stated impact is limited to confidentiality: unauthorized access to resources may expose information. The supplied scoring data indicates no integrity or availability impact.