CVE-2024-30142

3.8 lowEPSS 0.1%

Low (3.8) in hcltech bigfix compliance. EPSS 0.1% chance of exploitation in the next 30 days.

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel.

Severity

CVSS 3.1

3.8 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-614
Published: 2024-11-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_compliance

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197

Check your stack JSON