Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-3155
HistoryAug 14, 2015 - 6:59 p.m.

Session fixation

2015-08-1418:59:00
PRIOn knowledge base
www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

CPENameOperatorVersion
foremanle1.8.0

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

Related for PRION:CVE-2015-3155