CVE-2025-68833 PUBLISHED

HCL Hive is affected by use of a cryptographic primitive with a risky implementation

Assigner: HCL
Reserved: 24.12.2025 Published: 24.08.2026 Updated: 24.08.2026

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 5.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	HCLSoftware
Product	HCL Hive
Versions	Default: unaffected Version 1.0 is affected

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731

Problem Types

CWE-1240 Use of a cryptographic primitive with a risky implementation CWE