PT-2025-19760 · Hcl · Hcl Bigfix Compliance

Published 2025-05-05 · Updated 2025-05-05 · CVE-2024-42212

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL BigFix Compliance (affected versions not specified)

Description The issue is related to an improper or missing SameSite attribute, which can lead to Cross-Site Request Forgery (CSRF) attacks. A malicious site could trick a user's browser into making unintended requests using authenticated sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1275

Related Identifiers

CVE-2024-42212

Affected Products

Hcl Bigfix Compliance

References · 5

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-42212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42212 · Security Note
• https://t.me/cvedetector/24489 · Telegram Post
• https://twitter.com/CVEnew/status/1919470186756727071 · Twitter Post