PT-2019-15939
CVE-2019-19739
·
تاريخ النشر
2019-12-30
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MFScripts YetiShare versions 3.5.2 through 4.5.3
Description
The issue allows session cookies to be sent over cleartext channels because the Secure flag is not set on these cookies.
Recommendations
For versions 3.5.2 through 4.5.3, ensure that the Secure flag is set on session cookies to prevent them from being sent over cleartext channels.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾