CVE-2025-55269 PUBLISHED

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability

Assigner: HCL
Reserved: 12.08.2025 Published: 26.03.2026 Updated: 26.03.2026

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS Score: 4.2

Product Status

Vendor HCL
Product Aftermarket DPC
Versions Default: unaffected
  • Version version 1.0.0 is affected

References

Problem Types

  • CWE-521: Weak Password Requirements CWE