Aller au contenu
Se connecter
5.5 Moyenne

CVE-2024-30155 HCL SX does not set the secure attribute on authorization tokens or session cookies

Description

HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).

Produits et versions touchés

Produit Versions touchées Corrigé en
HCL SX 21 Pas de correctif indiqué

Autres CVE de HCL SX

Les 3 CVE de HCL SX →
CVE-2024-30152 HCL SX v21 is affected by usage of a weak cryptographic algorithm 6.5 Moyenne CVE-2024-30154 HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious… 5.3 Moyenne
Suivre cette CVE