CVE-2025-52608CWE-614

HCL iControl was affected by Missing Cookie Attributes vulnerability.

Low · published June 4, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00098 · 0.7th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2026-06-04T11:49Z
EPSS history
Timeline
  • 04 JUN 11:49Z
    HCL iControl was affected by Missing Cookie Attributes vulnerability.
    cvelistv5