VULNERABILITY INTELLIGENCE

CVE-2025-52608

CVSS score3.1 LOW
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Weakness classification

  • psirt@hcl.com: CWE-614

Primary references