Back to Database
Status published
High
CVE-2025-55278
HCL DevOps Loop is susceptible to an improper authentication vulnerability
Vulnerability Description
Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized access to sensitive resources and perform actions with elevated privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55278
Credits & Attribution
No credits recorded in the NVD database.
More from HCL Software
View All →CVE-2025-62346
HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability
Medium
6.8
CVE-2025-62340
HCL iControl was affected by Inadequate Session Timeout vulnerability
Low
3.1
CVE-2025-62330
HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information
Medium
5.9
CVE-2025-62329
HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability
Medium
5
CVE-2025-59873
Session Token Exposure via URL Query Parameters
Medium
5.9
Affected Vendor
HCL Software
View all reports →Affected Software
DevOps Loop
Vulnerable Versions:
1.0.2
Timeline
Official Publish:
November 5th, 2025
Last Modified:
November 6th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
MITRE ATT&CK TTPs
T1539
Steal Web Session Cookie
Credential Access
T1078
Valid Accounts
Persistence
T1550
Use Alternate Authentication Material
Defense Evasion
T1021
Remote Services
Lateral Movement
T1562
Impair Defenses
Defense Evasion
T1553
Subvert Trust Controls
Defense Evasion
T1190
Exploit Public-Facing Application
Initial Access
T1565
Data Manipulation
Impact