Threat Intelligence Database

CVE-2025-68825 is a high-severity vulnerability in HCLSoftware's HCL Hive version 1.0 caused by incorrect default permissions. This flaw could allow an attacker to perform unauthorized lateral movement, container breakout, and intercept sensitive internal communications. The vulnerability has a CVSS score of 7.5, indicating significant impact on confidentiality but no impact on integrity or availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached.

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.