CVE-2025-55275

Sažetak

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.

Reference

CVSS

Base:	3.7
Impact:	2.5
Exploitability:	1.2

Pristup

Vektor	Složenost	Autentikacija
NETWORK	HIGH	LOW

Impact

Povjerljivost	Cjelovitost	Dostupnost
LOW	NONE	LOW

CVSS vektor

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

Zadnje važnije ažuriranje

26-03-2026 - 20:25

Objavljeno

26-03-2026 - 13:16