CVE-2025-62342

{"id": "CVE-2025-62342", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62342", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-27T19:43:26.338533Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "IEM", "versions": [{"status": "affected", "version": "v1.3 and v1.4"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-27T17:17:05.527", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131777", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-613"}]}], "descriptions": [{"lang": "en", "value": "HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion."}, {"lang": "es", "value": "HCL IntelliOps Event Management (IEM) est\u00e1 afectado por una vulnerabilidad de eliminaci\u00f3n de sesi\u00f3n. Puede permitir un manejo inadecuado de las sesiones de usuario, lo que resulta en que las sesiones no se terminen completamente despu\u00e9s del cierre de sesi\u00f3n o la eliminaci\u00f3n."}], "lastModified": "2026-10-19T22:10:00.130", "sourceIdentifier": "psirt@hcl.com"}