Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. This vulnerability is fixed in 5.1.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-31991 Brute-Force Attack Vulnerability in HCL DevOps Velocity Below 5.1.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-31991
Post summary
A new brute‑force vulnerability identified as CVE‑2025‑31991 has been reported for HCL DevOps Velocity versions below 5.1.7, with no exploit or patch details provided yet.
CVE-2025-31991 Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login at… https://www.cve.org/CVERecord?id=CVE-2025-31991
Post summary
HCL DevOps Velocity’s rate limiting flaw allows brute‑force login attempts; no PoC, exploit, patch, or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | devops_velocity | - | - | - |