Lucene search
+L

3 matches found

NVD
NVD
added 2008/06/05 9:32 p.m.12 views

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP...

5CVSS6.7AI score0.01064EPSS
SaveExploits0References2
CVE
CVE
added 2008/06/05 9:0 p.m.42 views

CVE-2008-2558

CVE-2008-2558 affects CRE Loaded 6.2.13.1 and earlier. The issue is that cookies sent over HTTPS do not set the Secure attribute, potentially allowing cookie sniffing if transmitted over HTTP. Affected software: CRE Loaded 6.2.13.1 and earlier. Underlying cause: lack of Secure flag on HTTPS cooki...

5CVSS6.7AI score0.01064EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2008/06/05 9:0 p.m.21 views

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP...

6.7AI score0.01064EPSS
SaveExploits0References2
Rows per page
Query Builder