CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration
Attackers can maintain unauthorized access indefinitely due to insufficient session expiration in HCL iAutomate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-31952?
CVE-2025-31952 is a high-severity vulnerability in HCL Software iAutomate, published on 24 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.
Weakness: CWE-613
Which versions are affected by CVE-2025-31952?
It affects 1 product.
Products include Hcltech Dryice Iautomate.
How do I fix CVE-2025-31952?
No fix has been published for CVE-2025-31952 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-31952 being exploited?
There is no known exploitation of CVE-2025-31952 in the wild and no public exploit code.
Other vulnerabilities in HCL Software iAutomate
- CVE-2025-31955 HCL iAutomate is affected by a sensitive data exposure vulnerability
- CVE-2025-31953 HCL iAutomate is affected by hardcoded credentials
- CVE-2023-23347 Use of a broken cryptographic algorithm affects HCL DRYiCE iAutomate
- CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability
- CVE-2025-31954 HCL iAutomate is susceptible to a sensitive information disclosure
Sources
Also known as GHSA-j2w6-jmvx-4q23.