CVE-2025-52611
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
HCL iControl v4.0.0 discloses a stack trace due to an unhandled exception when JavaScript code attempts to read the 'dashboard key' property from an undefined object, possibly due to a missing or improperly initialized variable.
Risk Assessment
The risk is disclosure of application implementation details, which could help attackers understand the application structure and plan further attacks.
Recommendation
It is recommended to fix the JavaScript code to ensure proper object initialization before accessing properties and hide error details from users.
Original NVD description (English source)
HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed in the application's JavaScript code. Specifically, the code attempts to read the property dashboard key from an object that is undefined. This issue likely stems from one of the following: A missing or improperly initialized object.