Количество 3
Количество 3
CVE-2014-9250
Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.
CVE-2014-9250
Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a S ...
GHSA-m4rw-7xwx-x53p
Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-9250 Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418. | CVSS2: 5 | 2% Низкий | больше 11 лет назад |
| CVE-2014-9250 Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a S ... | CVSS2: 5 | 2% Низкий | больше 11 лет назад |
| GHSA-m4rw-7xwx-x53p Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418. | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу