medium5.5
CVE-2025-55264
HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control …
Impact
HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Aftermarket Cloud | Version 1.0.0 |