An information exposure vulnerability exists in
Vulnerability in HCL Software ZIE for Web.
The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions
This issue affects ZIE for Web: v16.
Weakness
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.
Potential Mitigations
References
- https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0128902