← Database

CVE-2024-42207

MEDIUM CVSS: 5.5 Published: 2025-02-05 Modified: 2026-06-17

Description

HCL iAutomate is affected by a session fixation vulnerability.  An attacker could hijack a victim's session ID from their authenticated session.

Affected Platforms

Hcltech Dryice Iautomate

Weakness Type

CWE-384

References