BaseFortify

Publication date: 2025-10-10

Last updated on: 2026-04-27

Assigner: HCL Software

Description

A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-10

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2025-10-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-52632

EUVD

EUVD-2025-33702

Affected Vendors & Products

Vendor	Product	Version / Range
hcltech	aion	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-614	The Secure attribute for sensitive cookies in HTTPS sessions is not set.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Secure Attribute in an Encrypted Session (SSL) Cookie in HCL AION version 2.0. It means that the Secure attribute, which ensures cookies are only sent over secure HTTPS connections, is not set on session cookies, potentially exposing them to interception or misuse.

Impact Analysis

The impact of this vulnerability is that session cookies may be transmitted over insecure channels, increasing the risk of interception by attackers. This can lead to session hijacking, unauthorized access, and potential compromise of user accounts or sensitive information.

Hi! I’m here to help you understand CVE-2025-52632. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70