Количество 4
Количество 4
CVE-2013-4964
Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVE-2013-4964
Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVE-2013-4964
Puppet Enterprise before 3.0.1 does not set the secure flag for the se ...
GHSA-w6pc-jf6c-2mr8
Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-4964 Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | CVSS2: 5 | 0% Низкий | больше 12 лет назад |
 | CVE-2013-4964 Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | CVSS2: 5 | 0% Низкий | больше 12 лет назад |
| CVE-2013-4964 Puppet Enterprise before 3.0.1 does not set the secure flag for the se ... | CVSS2: 5 | 0% Низкий | больше 12 лет назад |
| GHSA-w6pc-jf6c-2mr8 Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу