CVE-2025-52608

תיאור (מקור, אנגלית)

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

מדדים

CVSS 3.1

4.3 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-8/8/2026

CWE

CWE-614

מוצרים מושפעים

hcltech: icontrol

קישורים

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131061 Vendor Advisory