Skip to content
Sign in
5.5 Medium

CVE-2024-30155 HCL SX does not set the secure attribute on authorization tokens or session cookies

Description

HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).

Affected products and versions

Product Affected versions Fixed in
HCL SX 21 No fix stated

Other CVEs of HCL SX

The 3 CVEs of HCL SX →
CVE-2024-30152 HCL SX v21 is affected by usage of a weak cryptographic algorithm 6.5 Medium CVE-2024-30154 HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious… 5.3 Medium
Track this CVE