CVE-2025-55278 in DevOps Loopالمعلومات

الملخص

بحسب MITRE • 06/11/2025

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized access to sensitive resources and perform actions with elevated privileges.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

HCL

حجز

12/08/2025

إفشاء

06/11/2025

الاعتدال

تمت الموافقة

إدخال

VDB-331337

EPSS

0.00188

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!