HCL AION Multiple Security Vulnerabilities

HCL AION contains a container base image authentication vulnerability where container images are not properly verified before deployment, potentially allowing attackers to execute untrusted or malicious container images within the AION environment. This affects AION 2.0 and could enable attackers with local access and high privileges to compromise system integrity and availability. No public evidence of active exploitation or POC availability has been identified in the provided intelligence sources.

A security vulnerability in HCL AION (CVSS 4.7). Remediation should follow standard vulnerability management procedures.

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

A security vulnerability in HCL AION (CVSS 1.9). Remediation should follow standard vulnerability management procedures.

A remote code execution vulnerability in HCL AION (CVSS 1.8). Remediation should follow standard vulnerability management procedures.

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.