3.8
Faible
CVE-2024-30142 HCL BigFix Compliance is affected by a missing secure flag on a cookie
Description
HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix Compliance | 2.0.11 | Pas de correctif indiqué |
Autres CVE de BigFix Compliance
Les 6 CVE de BigFix Compliance →
CVE-2024-30141
HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
4.7
Moyenne
CVE-2024-30140
HCL BigFix Compliance is affected by unvalidated redirects and forwards
5.4
Moyenne
CVE-2024-30126
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a…
4.7
Moyenne
CVE-2024-30125
HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the…
6.2
Moyenne