CVE-2025-55275
Admin Session Concurrency Vulnerability in HCL Aftermarket DPC
Publication date: 2026-03-26
Last updated on: 2026-03-26
Assigner: HCL Software
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hcltech | aftermarket_cloud | 1.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-557 |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in HCL Aftermarket DPC is an Admin Session Concurrency issue. It allows an attacker to exploit concurrent admin sessions to hijack or impersonate an admin user.
How can this vulnerability impact me? :
This vulnerability can allow an attacker to take over or impersonate an admin user by exploiting concurrent sessions. This could lead to unauthorized access to administrative functions and potentially compromise the security and integrity of the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows an attacker to hijack or impersonate an admin user by exploiting concurrent admin sessions. This can lead to unauthorized access to sensitive data and administrative functions.
Such unauthorized access and potential data compromise can negatively impact compliance with standards and regulations like GDPR and HIPAA, which require strict controls on access to personal and sensitive information.