CVE-2025-55264

Description

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.

PUBLISHED Reserved 2025-08-12 | Published 2026-03-26 | Updated 2026-03-26 | Assigner HCL

Problem types

CWE-613: Insufficient Session Expiration

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0129793

cve.org (CVE-2025-55264)

nvd.nist.gov (CVE-2025-55264)

Download JSON