Логотип exploitDog
bind:CVE-2008-3662
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2008-3662

Количество 5

Количество 5

ubuntu логотип

CVE-2008-3662

около 17 лет назад

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2008-3662

около 17 лет назад

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

EPSS: Низкий
nvd логотип

CVE-2008-3662

около 17 лет назад

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2008-3662

около 17 лет назад

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure fl ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-38vp-pppf-865m

больше 3 лет назад

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2008-3662

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

CVSS2: 5
1%
Низкий
около 17 лет назад
redhat логотип
CVE-2008-3662

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

1%
Низкий
около 17 лет назад
nvd логотип
CVE-2008-3662

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

CVSS2: 5
1%
Низкий
около 17 лет назад
debian логотип
CVE-2008-3662

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure fl ...

CVSS2: 5
1%
Низкий
около 17 лет назад
github логотип
GHSA-38vp-pppf-865m

Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу