CVE-2025-31952

creationtimestamp| type| source ---|---|--- 2025-07-24 21:40:17+00:00| seen| Telegram/uNJ1koXpEvE9NRYOBvH5HVO3jJXTYkWlpamI9kj4P07xU...

CVE-2025-31952

The CVE-2025-31952 entry concerns HCL iAutomate and describes an insufficient session expiration vulnerability: tokens can remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access. The provided metrics show a high severity (CVSS 3.1 base score 7.1) with networ...

CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...