CVE-2024-30109 Information

Description

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.

Reference

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193