← Back

CVE-2024-42207

nvd nist
Published: Feb 5, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.0
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Exploitability: 1.2 / Impact: 4.7
Source: NVD

Description

HCL iAutomate is affected by a session fixation vulnerability.  An attacker could hijack a victim's session ID from their authenticated session.

Affected (1)

Hcltech
1 product
Dryice Iautomate
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dryice Iautomate
Version 6.4.2

Related CWEs

CWE-384
Session Fixation
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.