Threat Intelligence Database

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.

CVE-2025-68833 affects HCL Hive version 1.0 and involves insufficient granularity of access control in the HCL Hive Keycloak IAM instance. This vulnerability could allow an attacker to gain unauthorized access to certain resources. The CVSS score is 5.3, indicating a medium severity level. There is no indication of active exploitation in the wild, and no patch or official remediation has been provided yet.

HCL Hive version 1.0 contains a vulnerability involving the use of a cryptographic primitive with a risky implementation. This flaw could enable an attacker to perform unauthorized lateral compromise or cause widespread credential leakage if one internal component is breached. The vulnerability has a high severity rating with a CVSS score of 7.4. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.

HCL Hive version 1.0 is affected by a broken access control vulnerability (CWE-266) that could allow an attacker with high privileges to introduce unverified or malicious code directly into production environments. This vulnerability has a high severity with a CVSS score of 7.2. No official patch or remediation guidance is currently available from the vendor.