Description (CNA)
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HCL Software / iControl | affected v4.5.0 |
CWE
CWE-614