CVE-2024-42212

EPSS 0.03%
Veröffentlicht 05.05.2025 18:40:57
Zuletzt bearbeitet 17.06.2025 21:04:05
Quelle psirt@hcl.com
CVE-Watchlists
Login
Unerledigt
Login

HCL BigFix Compliance is affected by an improper or missing SameSite attribute.  This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hcltech ≫ Bigfix Compliance Version2.0.12

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.076

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@hcl.com	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-1275 Sensitive Cookie with Improper SameSite Attribute

The SameSite attribute for sensitive cookies is not set, or an insecure value is used.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-42212

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-42212

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-42212

EUVD