CVE-2024-30155

HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability PUBLISHED

Description (CNA)

HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL SX	affected 21

CWE

CWE-1275

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120110

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.