← All advisories

Medium severity5.5NVD Advisory· Published Feb 5, 2025· Updated Jun 17, 2026

CVE-2024-42207

CVE-2024-42207

Description

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.

Affected products

3

HCLTech/Dryice Iautomate
cpe:2.3:a:hcltech:dryice_iautomate:6.4.2:*:*:*:*:*:*:*
HCL Software/iAutomatellm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 6.4.2

Patches

Vulnerability mechanics

References

1

support.hcl-software.com/csmnvdVendor Advisory

News mentions

0

No linked articles in our index yet.