Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-42212

HCL BigFix Compliance is affected by an improper or missing SameSite attribute

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Compliance

Default version status: unaffected

  • 2.0.12affected

References