Description
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | iAutomate | 6.4.2 | — |
Medium · 5.5
CVE-2024-42207
EUVD-2024-39545GHSA-r89w-qx4v-xpfv
HCL iAutomate is affected by a session fixation vulnerability
Published Feb 5, 2025 · Updated Feb 5, 2025 · Assigned by HCL