CVEvulnerability

CVE-2025-52608

4.3 MEDIUM Published 2026-06-04 Modified 2026-07-22 Official page ↗
Status
Analyzed
Published
2026-06-04
Last modified
2026-07-22
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.1 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-614

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Affected configurations

• hcltech icontrol 4.0.0

Related

Weakness · CWE (1)

  • CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute weakness

References