CVE-2024-42212 — HCL BigFix Compliance is affected by an improper or missing SameSite attribute
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a…
Published: 2025-05-05 · CVSS: 5.4 · CVSS 3.1
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7