CVE-2024-30142CWE-614

HCL BigFix Compliance is affected by a missing secure flag on a cookie

Low · published November 7, 2024

CVSS v3.1
3.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00104 · 1.0th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2024-11-07T08:58Z
EPSS history
Timeline
  • 07 NOV 08:58Z
    HCL BigFix Compliance is affected by a missing secure flag on a cookie
    cvelistv5