CVE-2025-59873 — Session Token Exposure via URL Query Parameters

CVE-2025-59873

Session Token Exposure via URL Query Parameters PUBLISHED

Description (CNA)

An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions This issue affects ZIE for Web: v16.

Affected (CNA)

Vendor / product	Versions
HCL Software / ZIE for Web	affected v16

CWE

No CWE identifiers supplied.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128902

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.