PT-2019-15939

CVE-2019-19739

·

Published

2019-12-30

·

Updated

2020-08-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.3
Description The issue allows session cookies to be sent over cleartext channels because the Secure flag is not set on these cookies.
Recommendations For versions 3.5.2 through 4.5.3, ensure that the Secure flag is set on session cookies to prevent them from being sent over cleartext channels.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-311: Missing Encryption of Sensitive Data
Related identifiers
CVE-2019-19739
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com