Lucene search
K

6 matches found

NVD
NVD
added 2026/02/03 7:16 p.m.3 views

CVE-2025-52633

HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies may increase the risk of unauthorized access if the cookies are intercepted or compromised. This issue affects AION: 2.0...

5.3CVSS0.00058EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.2 views

Symphony Communication ServicesHp Symphony 安全漏洞

Symphony Communication ServicesHp Symphony is a solution from Symphony Communication ServicesHp, Inc. for connecting and liquefying financial transaction workflows. A security vulnerability exists in Symphony Communication ServicesHp Symphony that stems from the fact that when using a persistent...

7.5CVSS7.5AI score0.00088EPSS
Exploits1References4
Prion
Prion
added 2020/06/19 2:15 p.m.13 views

Design/Logic Flaw

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout...

5CVSS5.3AI score0.00237EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2019/07/08 12:43 p.m.23 views

Insecure Cookie Management

hawtio uses insecure cookie management. The vulnerability exists because a persistent cookie store that stores cookies locally results in all clients of the proxy to share the same cookies which allows an attacker to access the cookie information...

9CVSS8.7AI score0.00166EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2018/07/26 3:29 p.m.21 views

CVE-2017-2589

It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store cookies are stored locally and are not passed between the client and the end URL which means all clients using that proxy are sharing the same cookies...

9CVSS6.5AI score0.00166EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2008/12/17 11:50 p.m.57 views

USN-690-1: Firefox and xulrunner vulnerabilities

Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500, CVE-2008-5501, CVE-2008-5502 It was discovered that Firefox did not properly handle persistent cookie data. If ...

10CVSS8.4AI score0.06165EPSS
Exploits0
Rows per page
Query Builder