5.5
Medium
CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability
Description
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iAutomate | 6.4.2 | No fix stated |
Other CVEs of iAutomate
The 5 CVEs of iAutomate →
CVE-2025-31954
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure
5.4
Medium
CVE-2025-31952
HCL iAutomate is affected by an insufficient session expiration
7.1
High
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
7.6
High
CVE-2025-31953
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if…
7.1
High