7.4
High
CVE-2021-27764 Cookie without HTTPONLY flag set
Description
Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix WebUI | Versions not published |