Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2025-52608

HCL iControl was affected by Missing Cookie Attributes vulnerability.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL iControl

Default version status: unaffected

  • 4.0.0affected

References