CVE-2025-52640
MediumCVSS 4.7Summary
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.
Risk Assessment
The risk includes potential unauthorized access or modification of data by processes, which may lead to data integrity issues or unexpected failures.
Recommendation
Contact HCL for patches and review shared storage configuration to ensure proper access separation.
Original NVD description (English source)
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.