CVE-2024-42212 — HCL BigFix Compliance is affected by an improper or missing SameSite attribute

CVE-2024-42212

HCL BigFix Compliance is affected by an improper or missing SameSite attribute PUBLISHED

Description (CNA)

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Compliance	affected 2.0.12

CWE

CWE-1275

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.