Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 12:19 a.m.5 views

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS7.1AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 12:30 a.m.4 views

EUVD-2025-37960

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS6.6AI score0.00025EPSS
Exploits0References2
NVD
NVD
added 2025/11/05 11:16 p.m.2 views

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/05 10:44 p.m.8 views

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS0.00025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/05 10:44 p.m.5 views

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS6.8AI score0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/11/05 10:44 p.m.15 views

CVE-2025-55278

CVE-2025-55278 affects HCL DevOps Loop. Concrete details across sources show improper authentication in the API authentication middleware, allowing tokens to be accepted without proper validation of expiration or cryptographic signature. Affected component is the API authentication layer; root ca...

8.1CVSS6.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.4 views

HCL DevOps Loop 安全漏洞

HCL DevOps Loop is a suite of code development platforms from HCL India. A security vulnerability exists in HCL DevOps Loop that stems from the API authentication middleware not properly validating token expiration times and cryptographic signatures, which could lead to the use of expired or...

8.1CVSS7.2AI score0.00025EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.3 views

PT-2025-45165

Name of the Vulnerable Software and Affected Versions HCL DevOps Loop affected versions not specified Description The API authentication middleware in HCL DevOps Loop does not properly validate authentication tokens, specifically regarding their expiration and cryptographic signature. This could...

8.1CVSS6.7AI score0.00025EPSS
Exploits0References4
Rows per page
Query Builder