CVE-2024-23572 — HCLSoftware / Aftermarket EPC

CVE-2024-23572

HCLSoftware / Aftermarket EPC PUBLISHED

Description (CNA)

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Aftermarket EPC	affected version 1.0.0

CWE

CWE-614

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.