Weak Password Policy in HCL AION v2 Enables Unauthorized Access

Publication date: 2026-01-19

Last updated on: 2026-04-25

Assigner: HCL Software

Description

HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-19

Last Modified

2026-04-25

Generated

2026-07-06

AI Q&A

2026-01-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-55252

Affected Vendors & Products

Vendor	Product	Version / Range
hcltech	aion	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-521	The product does not require that users should have strong passwords.

Attack-Flow Graph

Executive Summary

This vulnerability in HCL AION version 2 is due to a Weak Password Policy, which allows the use of easily guessable passwords. This weakness can enable unauthorized users to gain access to the system.

Impact Analysis

The vulnerability can lead to unauthorized access to the system because attackers may exploit weak password policies to guess passwords and gain entry, potentially compromising confidentiality and integrity of data.

Mitigation Strategies

To mitigate this vulnerability, you should enforce a stronger password policy in HCL AION version 2 to prevent the use of easily guessable passwords and reduce the risk of unauthorized access.

Hi! I’m here to help you understand CVE-2025-55252. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70