3 matches found
Session fixation
Foreman before 1.8.1 does not set the secure flag for the sessionid cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
5CVSS6.8AI score0.02222EPSS
SaveExploits0References6Affected Software1
CVE-2015-3155
Foreman before 1.8.1 does not set the secure flag for the sessionid cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
6.9CVSS0.02222EPSS
SaveExploits0References6
CVE-2015-3155: Improper Access Control
Foreman before 1.8.1 does not set the secure flag for the sessionid cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
5CVSS5.9AI score0.02222EPSS
SaveExploits0References2
20