CVE-2025-15619: low-severity vulnerability in HCLSoftware Connections
HCL Connections is vulnerable to broken access control
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
HCL Connections has a flaw that could let an unauthorized person view certain data in a specific situation. This means access controls aren't working properly in that case.
A broken access control vulnerability exists in HCL Connections (CWE-284) where insufficient authorization checks allow an unauthenticated or low-privileged user to access restricted data in a narrow attack scenario. The vulnerability requires specific preconditions and has limited scope, affecting confidentiality of data in that particular context.
In the same product, most dangerous first.