CVE-2025-31952CWE-613

HCL iAutomate is affected by an insufficient session expiration

High · published July 24, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.1th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-07-24T21:01Z
EPSS history
Timeline
  • 24 JUL 21:01Z
    HCL iAutomate is affected by an insufficient session expiration
    cvelistv5