| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix service management | = 27 |
HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free