Lucene search
Veracode Vulnerability DatabaseVERACODE:37229HistorySep 21, 2022 - 6:57 p.m.
Information Disclosure
2022-09-2118:57:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
rdiffweb
cve-2022-3174
session cookies
insecure http
vulnerability
EPSS
0.001
Percentile
51.2%
Rdiffweb is vulnerable to Sensitive Information Disclosure. The vulnerability exists due to an incomplete fix of CVE-2022-3174 which causes session cookies instantiated without the Secure attribute when the provided url is invalid. This flaw allows the transport of user cookies over insecure HTTP.
Related
huntr
huntr
Secure token is missed when ivalid URL is entered
2022-09-20 13:41:04
Session_id without Secure attribute
2022-09-09 06:57:10
cve
cve
CVE-2022-3250
2022-09-21 17:15:09
CVE-2022-3174
2022-09-13 10:15:12
osv
osv
PYSEC-2022-287
2022-09-21 17:15:00
rdiffweb has insecure HTTP cookies
2022-09-22 00:00:24
CVE-2022-3250
2022-09-21 17:15:09
github
github
rdiffweb has insecure HTTP cookies
2022-09-22 00:00:24
nvd
nvd
CVE-2022-3250
2022-09-21 17:15:09
CVE-2022-3174
2022-09-13 10:15:12
cvelist
cvelist
prion
prion
Session fixation
2022-09-21 17:15:00
Session fixation
2022-09-13 10:15:00
veracode
veracode
Sensitive Information Disclosure
2022-09-13 16:59:31