Description
HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.
References1
Metrics
- CVSS 3.1
-
3.0
LOW
Score source: CNA
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - EPSS — exploit probability
- 0% percentile: 3 · as of 14 November 2026
- CWE
- CWE-522
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.