Описание
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hcltech:dryice_iautomate:6.4.2:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00149
Низкий
5.5 Medium
CVSS3
6 Medium
CVSS3
Дефекты
CWE-384
Связанные уязвимости
CVSS3: 5.5
github
около 1 года назад
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.
EPSS
Процентиль: 36%
0.00149
Низкий
5.5 Medium
CVSS3
6 Medium
CVSS3
Дефекты
CWE-384