low3.8
CVE-2024-30142
HCL BigFix Compliance is affected by a missing secure flag on a cookie.
Impact
HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Compliance | Version 2.0.11 |