CyberRota Analysis
AI-GeneratedThe vulnerability in iControl allows attackers to intercept cookies sent over unencrypted HTTP connections due to a missing secure attribute, potentially leading to unauthorized access to sensitive information like session identifiers. Organizations using iControl should prioritize addressing this issue to mitigate the risk of session hijacking and protect user data. While the severity is classified as low, the potential for information exposure warrants attention, especially in environments handling sensitive transactions.
Original NVD Description
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers.