PT-2019-18964
CVE-2019-8283
·
Published
2019-06-07
·
Updated
2021-09-14
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Gemalto Admin Control Center versions prior to 7.92
Description
The issue concerns the Hasplm cookie, which lacks the 'HttpOnly' flag, allowing malicious javascript to steal it.
Recommendations
For versions prior to 7.92, consider setting the 'HttpOnly' flag for the Hasplm cookie to prevent malicious javascript from accessing it.
Found an issue in the description? Have something to add? Feel free to write us 👾