Session fixation

2021-12-1013:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.

CPENameOperatorVersion
transport_wr11_firmwarelt6.0.0.0
transport_wr11_xt_firmwarelt6.0.0.0
transport_wr21_firmwarelt6.0.0.0
transport_wr31_firmwarelt6.0.0.0
transport_wr41_firmwarelt6.0.0.0
transport_wr44_firmwarelt6.0.0.0

Name	Operator	Version
transport_wr11_firmware	lt	6.0.0.0
transport_wr11_xt_firmware	lt	6.0.0.0
transport_wr21_firmware	lt	6.0.0.0
transport_wr31_firmware	lt	6.0.0.0
transport_wr41_firmware	lt	6.0.0.0
transport_wr44_firmware	lt	6.0.0.0