nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-23572 CVE-2024-23572
MEDIUM
HCL Aftermarket EPC Missing Secure Cookie Attribute
Record summary
CVE-2024-23572 has a selected CVSS score of 4.2 (medium).
Description
HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 17, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Aftermarket EPCBrowse HCLSoftware / Aftermarket EPCDefault status: unaffected | CVE List | version 1.0.0 | affected |
References
2support.hcl-software.com
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294