Hcl EUVD-2025-208737

The CVSS 3.1 vector (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) indicates local attack vector with high complexity, requiring low privileges and no user interaction. While the confidentiality and availability impacts are rated as low, the integrity impact is rated high, suggesting an attacker could modify or hide evidence of unauthorized actions. The moderate CVSS of 5.8 reflects that exploitation requires local access and elevated complexity, limiting opportunistic remote attacks. However, the real-world risk is significant in environments where insider threats or lateral movement post-compromise is a concern, as the lack of audit trails directly undermines incident response capabilities and regulatory compliance. This is not an active KEV or known public exploit scenario based on available intelligence, but the nature of audit-logging bypasses makes it particularly valuable to advanced persistent threat actors seeking to operate undetected within compromised environments.

A privileged insider or lateral movement attacker with local access to an AION server could exploit this vulnerability to perform unauthorized administrative actions—such as modifying user permissions, exporting sensitive data, or disabling security controls—while evading audit trail detection due to inadequate logging mechanisms. Because the attack vector is local with high complexity, this is most realistic in post-compromise scenarios where an attacker has already gained initial access and seeks to operate undetected during privilege escalation or data exfiltration phases. The lack of proper audit trails would significantly delay detection and complicate forensic investigation of the incident.