Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-55264

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Aftermarket DPC

Default version status: unaffected

  • version 1.0.0affected

References