CVE-2025-52648 PUBLISHED

Assigner: HCL
Reserved: 18.06.2025 Published: 16.03.2026 Updated: 16.03.2026

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS Score: 4.8

Product Status

Vendor HCL
Product AION
Versions Default: unaffected
  • Version 2.0 is affected

References