Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0154
HistoryFeb 13, 2015 - 3:00 p.m.

CVE-2014-0154

2015-02-1315:00:00
redhat
www.cve.org
3

AI Score

6

Confidence

Low

EPSS

0.003

Percentile

70.2%

oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

AI Score

6

Confidence

Low

EPSS

0.003

Percentile

70.2%

Related for CVELIST:CVE-2014-0154