Lucene search

K
cvelistMitreCVELIST:CVE-2014-8775
HistoryDec 03, 2014 - 6:00 p.m.

CVE-2014-8775

2014-12-0318:00:00
mitre
www.cve.org
2

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

64.5%

MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

64.5%

Related for CVELIST:CVE-2014-8775