← Database

CVE-2024-42212

MEDIUM CVSS: 5.4 Published: 2025-05-05 Modified: 2026-06-17

Description

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Affected Platforms

Hcltech Bigfix Compliance

Weakness Type

CWE-1275

References