← Back

CVE-2026-56581

nvd nist
Published: Jul 21, 2026Modified: Jul 21, 2026

JSON object

Loading...
2.6
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.2 / Impact: 1.4
Source: psirt@hcl.com (Secondary)

Description

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

Affected (1)

Products: Hcltech: Mycloud
Hcltech
1 product
Mycloud
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Mycloud
Version 10.8.1

Related CWEs

CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.