medium5.5
CVE-2024-30155
HCL SX does not set the secure attribute on authorization tokens or session cookies.
Impact
HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Sx | Version 21 |