CVE-2024-30155: HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability
HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30155?
CVE-2024-30155 is considered a medium severity vulnerability due to the potential exposure of sensitive authorization tokens.
How do I fix CVE-2024-30155?
To fix CVE-2024-30155, ensure that your application sets the secure attribute on all authorization tokens and session cookies.
What vulnerabilities are associated with CVE-2024-30155?
CVE-2024-30155 is associated with the risk of Cross-Site Request Forgery (CSRF) attacks that could compromise user session security.
Which software is affected by CVE-2024-30155?
CVE-2024-30155 affects HCL SX software that does not enforce secure attributes on cookies.
What are the consequences of CVE-2024-30155?
The consequences of CVE-2024-30155 include possible unauthorized access to user sessions, leading to data breaches.