PT-2025-12861 · Hcl · Hcl Sx

Published 2025-03-26 · Updated 2025-10-30 · CVE-2024-30155

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HCL SX (affected versions not specified)

Description The issue concerns the lack of the secure attribute in authorization tokens and session cookies. This could allow attackers to obtain access to cookie values via a Cross-Site-Forgery-Request (CSRF).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1275

Related Identifiers

CVE-2024-30155

Affected Products

Hcl Sx

References · 8

• https://osv.dev/vulnerability/CVE-2024-30155 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30155 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120110 · Vendor Advisory
• https://t.me/cvetracker/19938 · Telegram Post
• https://twitter.com/CVEnew/status/1904817039086145621 · Twitter Post
• https://t.me/cvedetector/21148 · Telegram Post
• https://t.me/cvenotify/116279 · Telegram Post
• https://t.me/cveNotify/140965 · Telegram Post