CVE-2025-31952

Publication date

2025-07-24 21:01:57

Family

HCL

State

PUBLISHED

Description

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.