CVE-2024-42212

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - psirt@hcl.com

Published

2025-05-05

Last modified

2025-05-05

Weaknesses

CWE-1275

Affected products

• Hcl Bigfix Compliance (Hcl Software)
• Bigfix Compliance (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961