CVE-2024-23572
Received Received - Intake

Session Token Exposure in HCL Aftermarket EPC

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: HCL Software

Description
HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-17
Last Modified
2026-07-17
Generated
2026-07-17
AI Q&A
2026-07-17
EPSS Evaluated
N/A
NVD
CVE-2024-23572
EUVD
EUVD-2024-55672

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcl aftermarket_epc *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-614 The Secure attribute for sensitive cookies in HTTPS sessions is not set.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HCL Aftermarket EPC has a vulnerability where a cookie appears to contain a session token. This could allow attackers to hijack user sessions if the token is exposed or manipulated, increasing the risk of unauthorized access to sensitive data or functions.

Detection Guidance

Review HTTP cookies in browser developer tools or network traffic for session tokens in HCL Aftermarket EPC. Check for cookies containing session identifiers or tokens that may indicate improper handling.

Impact Analysis

If exploited, this vulnerability could allow attackers to take over user sessions, leading to unauthorized access to accounts, sensitive data, or system functions. Users may face data breaches, account hijacking, or other security incidents.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access control. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Inspect cookies used by HCL Aftermarket EPC to confirm their purpose. If session tokens are present, ensure they are necessary and properly secured. Apply patches or updates from HCL if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-23572. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart