← Back

CVE-2025-52608

nvd nist
Published: Jun 4, 2026Modified: Jul 22, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Affected (1)

Products: Hcltech: Icontrol
Hcltech
1 product
Icontrol
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Icontrol
Version 4.0.0

Related CWEs

CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.