5.4
Medium
CVE-2024-42212 HCL BigFix Compliance is affected by an improper or missing SameSite attribute
Description
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL BigFix Compliance | 2.0.12 | No fix stated |