HCL iAutomate versions 6.5.1 and 6.5.2 have a vulnerability where sensitive information is exposed via the query string in HTTP GET requests. This could allow an attacker with some privileges to access information they should not see. The issue is classified as a medium severity information disclosure.