HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.
Weakness
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unica | Hcltech | * | 25.1.0 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0124417