5.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Description
HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.
Basic Information
ID
CVE-2025-55264
Source
HCL
Published
Mar 26, 2026 at 13:04
Modified
Mar 26, 2026 at 18:35
Affected Product
Vendor
HCL
Product
Aftermarket DPC
Version
version 1.0.0
Affected Versions
HCL Aftermarket DPC version 1.0.0