CVE-2024-30155

HCL SX is affected by CVE-2024-30155: it does not set the Secure attribute on authorization tokens or session cookies, potentially enabling cookie value access via CSRF. Affected component is the cookie handling for authorization/session cookies; underlying cause is missing Secure attribute enfor...

CVE-2024-30152

CVE-2024-30152 concerns HCL SX v21, where the vulnerability arises from the use of a weak cryptographic algorithm. The exposed component is the HCL SX v21 cryptographic handling, leading to potential disclosure of sensitive information and data integrity/availability impacts. Public references in...

CVE-2024-30154

CVE-2024-30154 is described across multiple sources as a Cross-Site Request Forgery vulnerability in HCL SX. The connected documents confirm the affected product (HCL SX) and the CSRF nature, with impact statements indicating potential unauthorized actions and high integrity impact, but they do n...