medium5.4
CVE-2024-42212
HCL BigFix Compliance is affected by an improper or missing SameSite attribute.
Impact
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Compliance | Version 2.0.12 |