Lucene search
PRIOn knowledge basePRION:CVE-2023-5035HistoryNov 02, 2023 - 5:15 p.m.
Design/Logic Flaw
2023-11-0217:15:00
PRIOn knowledge base
www.prio-n.com
6
vulnerability
firmware
pt-g503
cookie
transmission
plaintext
http
session
security
risks
user data
unauthorized access
A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eds-g503_firmware | lt | 5.2 |
Related
nessus
nessus
Moxa PT-G503 Series Sensitive Cookie Not Properly Secured (CVE-2023-5035)
2023-11-09 00:00:00
cve
cve
CVE-2023-5035
2023-11-02 17:15:11
cvelist
cvelist
CVE-2023-5035 Cookie Without Secure Flag
2023-11-02 16:11:13
nvd
nvd
CVE-2023-5035
2023-11-02 17:15:11