HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a users browser into making unintended requests using authenticated sessions.
The SameSite attribute for sensitive cookies is not set, or an insecure value is used.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bigfix_compliance | Hcltech | 2.0.12 (including) | 2.0.12 (including) |