PT-2014-5554

CVE-2014-3853

·

Publicado

2014-08-07

·

Atualizado

2014-08-07

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Pyplate version 0.08
Description The issue concerns a failure to set the secure flag for the id cookie in an HTTPS session. This oversight makes it easier for remote attackers to capture the cookie by intercepting its transmission within an HTTP session.
Recommendations For Pyplate version 0.08, ensure that the secure flag is set for the id cookie in HTTPS sessions to prevent its interception in HTTP sessions.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2014-3853
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com