HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a users browser into making unintended requests using authenticated sessions.
The SameSite attribute for sensitive cookies is not set, or an insecure value is used.