Home

Description

HCL iAutomate is affected by a session fixation vulnerability.  An attacker could hijack a victim's session ID from their authenticated session.

PUBLISHED Reserved 2024-07-29 | Published 2025-02-05 | Updated 2025-02-05 | Assigner HCL




MEDIUM: 5.5CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L

Problem types

CWE-384 Session Fixation

Product status

Default status
unaffected

6.4.2
affected

References

support.hcl-software.com/...rticle&sysparm_article=KB0118946

cve.org (CVE-2024-42207)

nvd.nist.gov (CVE-2024-42207)

Download JSON