CVE-2013-4725

Name of the Vulnerable Software and Affected Versions DDSN Interactive cm3 Acora CMS versions 5.5.0/1b-p1 through 6.0.6/1a

Description The issue allows remote attackers to capture an unspecified cookie by intercepting its transmission within an http session, as the cookie is not set with the secure flag in an https session.

Recommendations For versions 5.5.0/1b-p1 through 6.0.6/1a, consider setting the secure flag for the unspecified cookie to prevent it from being transmitted over http sessions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.