PT-2011-1290

Name of the Vulnerable Software and Affected Versions Android browser affected versions not specified Description The issue is related to the Android browser's inability to properly restrict modifications to cookies established in HTTPS sessions. This allows man-in-the-middle attackers to overwri...

PT-2011-1285

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 4 Description The issue allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response. This is related to the lack of the HTTP Strict Transport Securit...