5.4
Moyenne
CVE-2024-42212 HCL BigFix Compliance is affected by an improper or missing SameSite attribute
Description
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Compliance | 2.0.12 | Pas de correctif indiqué |