EXPOSURES › CVE-2025-31991
CVE-2025-31991
MEDIUM
DETAIL
SourceNVD · cve
Published2026-04-13
CVSS6.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-31991 ↗
SHAME 20/100
Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. This vulnerability is fixed in 5.1.7.
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. This vulnerability is fixed in 5.1.7.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.