CVE-2025-62327CWE-522

CVE-2025-62327

Medium · published January 7, 2026

CVSS v3.1
4.9
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credential previously saved for performing authenticated LLM Queries.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-01-07T21:15Z
Affected products (1)
ProductVersionsFixed in
hcltechsw/hcl_devops_deploy≥ 8.1.2.0, < 8.1.2.38.1.2.3
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127336 · [email protected]
EPSS history
Timeline
  • 07 JAN 15:17Z
    HCL DevOps Deploy is susceptible to insufficiently protected credentials
    cvelistv5