PT-2020-7458
CVE-2013-3637
·
Published
2020-02-07
·
Updated
2020-05-06
Description by
CVSS 2.0
3.5
LowMetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
ProjectPier version 0.8.8
Description:
The issue is related to the insecure use of cookies. ProjectPier 0.8.8 does not set the Secure flag for cookies, which could potentially expose sensitive information.
Recommendations:
For ProjectPier version 0.8.8, consider updating the cookie settings to include the Secure flag to prevent potential information exposure.
Found an issue in the description? Have something to add? Feel free to write us 👾