CVE-2024-30155 HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability

HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request CSRF...

CVE-2024-30155

HCL SX is affected by CVE-2024-30155: it does not set the Secure attribute on authorization tokens or session cookies, potentially enabling cookie value access via CSRF. Affected component is the cookie handling for authorization/session cookies; underlying cause is missing Secure attribute enfor...