HCL IEM Authorization Token Exposure Vulnerability

A vulnerability exists in HCL IEM version 1.2, where an authorization token used for authentication is sent in cookies, potentially increasing its exposure to security risks. This vulnerability could allow unauthorized access or manipulation of user data.

Impact

Exposing authorization tokens in cookies can lead to unauthorized access or actions on behalf of the user, potentially allowing attackers to manipulate or access sensitive information.

Remediation

Users can upgrade to HCL IEM version 1.3, which addresses this vulnerability. HCL IEM support can assist with the upgrade process.