Session Fixation Vulnerability in HCL iAutomate

CVE-2024-42207

What is CVE-2024-42207?

HCL iAutomate is susceptible to a session fixation vulnerability, which allows attackers to hijack a victim's authenticated session by exploiting their session ID. By manipulating session IDs during the authentication process, an attacker can gain unauthorized access to sensitive information. This poses significant security risks for users as their ongoing sessions may be compromised without their knowledge.

References