← Back

CVE-2024-23572

nvd nist
Published: Jul 17, 2026Modified: Jul 17, 2026Deferred

JSON object

Loading...
4.2
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Exploitability: 1.6 / Impact: 2.5
Source: psirt@hcl.com (Secondary)

Description

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.

Related CWEs

CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

References (1)

Source: psirt@hcl.com

Timeline

No history available yet.