A vulnerability in HCL AION allows the disclosure of sensitive backend infrastructure information, such as internal system architecture or configuration settings. This information could be leveraged by an attacker to gain insights that facilitate further attacks, though the CVE does not describe direct exploitation or immediate compromise.

The vulnerability affects HCL AION. No specific version or release details are supplied in the data provided.

The CVSS score of 5.1 indicates a moderate level of risk. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it is not currently known to be exploited at scale. The likely attack vector involves exposed interfaces or configuration endpoints that disclose internal details; however, the exact mechanism and prerequisites are not detailed in the description and are inferred based on the exposure nature of the issue.