Логотип exploitDog
bind:CVE-2014-9250
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2014-9250

Количество 3

Количество 3

nvd логотип

CVE-2014-9250

около 11 лет назад

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2014-9250

около 11 лет назад

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a S ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-m4rw-7xwx-x53p

больше 3 лет назад

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2014-9250

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.

CVSS2: 5
1%
Низкий
около 11 лет назад
debian логотип
CVE-2014-9250

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a S ...

CVSS2: 5
1%
Низкий
около 11 лет назад
github логотип
GHSA-m4rw-7xwx-x53p

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу