Lucene search

CVE-2013-4617

🗓️ 27 Nov 2013 18:04:55Reported by mitreType

Jahia xCM before 6.6.2 doesn't include HTTPOnly flag in Set-Cookie header for JSESSIONID cookie, making it easier for remote attackers to obtain sensitive information

Reporter	Title	Published	Views	Family All 3
NVD	CVE-2013-4617	27 Nov 201318:55	–	nvd
Cvelist	CVE-2013-4617	27 Nov 201318:00	–	cvelist
Prion	Design/Logic Flaw	27 Nov 201318:55	–	prion

Nvd

Node

jahia jahia_xcmRange≤6.6.1

Source	Link
navixia	www.navixia.com/blog/entry/navixia-finds-critical-vulnerabilities-in-jahia-cve-2013-3920-cve-2013-4617.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Nov 2013 18:55Current

6.2Medium risk

Vulners AI Score6.2

CVSS25

EPSS0.00614

CWE-200