CVE-2025-52608

LOW CVSS 3.1 View on NVD ↗

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products

hcltech/icontrol

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131061

Published: Jun 04, 2026 12:16 UTC Modified: Jun 04, 2026 18:38 UTC