Files
vuln-nvd/data/2025/CVE-2025-0251.json
T

2 lines
2.4 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"IEM","vendor":"HCL Software","versions":[{"status":"affected","version":"1.2"}]}],"source":"psirt@hcl.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hcltech:intelliops_event_management:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF519A2-D7B5-459C-89C0-EFB0DDEF7168","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks."},{"lang":"es","value":"HCL IEM se ve afectado por una vulnerabilidad de inicio de sesión simultáneo. La aplicación permite múltiples sesiones simultáneas con las mismas credenciales de usuario, lo que puede suponer riesgos de seguridad."}],"id":"CVE-2025-0251","lastModified":"2026-06-17T08:26:10.513","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.6,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"psirt@hcl.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.1,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0251","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-07-25T13:20:06.213346Z","version":"2.0.3"}}]},"published":"2025-07-25T01:15:44.613","references":[{"source":"psirt@hcl.com","tags":["Vendor Advisory"],"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-384"}],"source":"psirt@hcl.com","type":"Secondary"}]}