CVE-2025-52608

Name of the Vulnerable Software and Affected Versions HCL iControl (affected versions not specified)

Description The application fails to implement critical cookie attributes, specifically the Secure and SameSite attributes. Additionally, the cookie path is configured to the root directory. The Secure attribute ensures cookies are only sent over encrypted connections, while the SameSite attribute helps protect against cross-site request forgery by controlling whether cookies are sent with cross-site requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.