Lucene search
Mozilla FoundationMFSA2009-05HistoryFeb 03, 2009 - 12:00 a.m.
XMLHttpRequest allows reading HTTPOnly cookies — Mozilla
2009-02-0300:00:00
Mozilla Foundation
www.mozilla.org
16
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
75.4%
Developer and Mozilla community member Wladimir Palant reported that cookies marked HTTPOnly were readable by JavaScript via the XMLHttpRequest.getResponseHeader and XMLHttpRequest.getAllResponseHeaders APIs. This vulnerability bypasses the security mechanism provided by the HTTPOnly flag which intends to restrict JavaScript access to document.cookie.
Related
ubuntucve
ubuntucve
CVE-2009-0357
2009-02-04 00:00:00
prion
prion
Design/Logic Flaw
2009-02-04 19:30:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:13
cve
cve
CVE-2009-0357
2009-02-04 19:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-05
2009-02-05 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2009-02-05 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2009-02-10 00:00:00
Firefox vulnerabilities
2009-02-11 00:00:00
Firefox and Xulrunner vulnerabilities
2009-02-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-717-2)
2009-02-13 00:00:00
Ubuntu USN-717-3 (firefox)
2009-02-13 00:00:00
Ubuntu: Security Advisory (USN-717-3)
2009-02-13 00:00:00
nessus
nessus
Ubuntu 7.10 : firefox-3.0 vulnerabilities (USN-717-2)
2013-03-09 00:00:00
Ubuntu 6.06 LTS : firefox vulnerabilities (USN-717-3)
2013-03-09 00:00:00
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0257)
2013-07-12 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-02-04 00:00:00
firefox security update
2009-02-04 00:00:00
centos
centos
seamonkey security update
2009-02-04 16:39:15
seamonkey security update
2009-02-06 03:50:55
firefox, nss, xulrunner security update
2009-02-05 00:56:08
redhat
redhat
(RHSA-2009:0257) Critical: seamonkey security update
2009-02-04 00:00:00
(RHSA-2009:0256) Critical: firefox security update
2009-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: ruby-gnome2-0.17.0-5.fc9
2009-02-06 05:22:35
[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-4.fc10
2009-02-06 05:21:19
[SECURITY] Fedora 9 Update: epiphany-2.22.2-7.fc9
2009-02-06 05:22:34
freebsd
freebsd
firefox -- multiple vulnerabilities
2009-02-04 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-02-16 13:05:54
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
75.4%
Related for MFSA2009-05