一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-56599 [LOW] – HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vu

未分类
📑 文章目录

HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access.