CVE-2024-30142 — HCL BigFix Compliance is affected by a missing secure flag on a cookie
HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized a…
Published: 2024-11-07 · CVSS: 3.8 · CVSS 3.1
HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7