CVE-2024-30142 | THREATINT

Description

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.

Reserved 2024-03-22 | Published 2024-11-07 | Updated 2024-11-07 | Assigner HCL

LOW: 3.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Problem types

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Product status

Default status

unaffected

2.0.11

affected

References

support.hcl-software.com/...rticle&sysparm_article=KB0117197

cve.org (CVE-2024-30142)

nvd.nist.gov (CVE-2024-30142)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.