CVE-2025-0251 - Vulnerability Details - OpenCVE

HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Hcltech	Intelliops Event Management

Configuration 1 [-]

cpe:2.3:a:hcltech:intelliops_event_management:1.2:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368

History

Thu, 09 Oct 2025 20:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hcltech Hcltech intelliops Event Management
CPEs		cpe:2.3:a:hcltech:intelliops_event_management:1.2:::::::*
Vendors & Products		Hcltech Hcltech intelliops Event Management

Fri, 25 Jul 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 25 Jul 2025 00:45:00 +0000

Type	Values Removed	Values Added
Description		HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.
Title		HCL IEM is affected by a concurrent login vulnerability
Weaknesses		CWE-384
References		https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
Metrics		cvssV3_1 `{'score': 2.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: HCL

Published: 2025-07-25T00:06:08.416Z

Updated: 2025-07-25T13:20:11.490Z

Reserved: 2025-01-06T16:00:26.083Z

Link: CVE-2025-0251

Vulnrichment

Updated: 2025-07-25T13:20:08.821Z

NVD

Status : Analyzed

Published: 2025-07-25T01:15:44.613

Modified: 2025-10-09T19:55:49.553

Link: CVE-2025-0251

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0251", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "state": "PUBLISHED", "assignerShortName": "HCL", "dateReserved": "2025-01-06T16:00:26.083Z", "datePublished": "2025-07-25T00:06:08.416Z", "dateUpdated": "2025-07-25T13:20:11.490Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "IEM", "vendor": "HCL Software", "versions": [{"status": "affected", "version": "1.2"}]}], "datePublic": "2025-07-24T23:15:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks."}], "value": "HCL IEM is affected by a concurrent login vulnerability.\u00a0 The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.6, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-384", "description": "CWE-384 Session Fixation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-07-25T00:20:54.150Z"}, "references": [{"name": "VDB-299060 | PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization", "tags": ["x_refsource_CONFIRM"], "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368"}], "source": {"discovery": "INTERNAL"}, "title": "HCL IEM is affected by a concurrent login vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-25T13:20:06.213346Z", "id": "CVE-2025-0251", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-25T13:20:11.490Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0251", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-25T13:20:06.213346Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-25T13:20:08.821Z"}}], "cna": {"title": "HCL IEM is affected by a concurrent login vulnerability", "source": {"discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.6, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HCL Software", "product": "IEM", "versions": [{"status": "affected", "version": "1.2"}], "defaultStatus": "unaffected"}], "datePublic": "2025-07-24T23:15:00.000Z", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368", "name": "VDB-299060 | PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization", "tags": ["x_refsource_CONFIRM"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "HCL IEM is affected by a concurrent login vulnerability.\u00a0 The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.", "supportingMedia": [{"type": "text/html", "value": "HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-384", "description": "CWE-384 Session Fixation"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-07-25T00:20:54.150Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0251", "state": "PUBLISHED", "dateUpdated": "2025-07-25T13:20:11.490Z", "dateReserved": "2025-01-06T16:00:26.083Z", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "datePublished": "2025-07-25T00:06:08.416Z", "assignerShortName": "HCL"}, "dataVersion": "5.1"}