PT-2026-46184 · Hcl · Icontrol

Published 2026-06-04 · Updated 2026-06-04 · CVE-2025-52608

NVD

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Fix

Weakness Enumeration

CWE-614

Related Identifiers

CVE-2025-52608

Affected Products

Icontrol

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-52608 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131061 · Note