Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40221
HistoryApr 20, 2023 - 9:38 a.m.

Insecure Session Management

2023-04-2009:38:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
firefox
session management
cookie desynchronization

EPSS

0.001

Percentile

33.1%

firefox is vulnerable to Insecure Session Management. The vulnerability allows the creation of a insecure cookie of the same domain while a secure cookie exists. This could lead to desynchronization in expected results when reading from the secure cookie.