2.2
Faible
CVE-2026-56599 HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow…
Description
HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL BigFix Service Management | Versions non publiées |
Autres CVE de HCL BigFix Service Management
Les 18 CVE de HCL BigFix Service Management →
CVE-2026-56596
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
3.5
Faible
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker…
4.3
Moyenne
CVE-2026-67172
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive…
3.7
Faible
CVE-2026-67171
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint…
5.3
Moyenne