PT-2022-27800 · Unknown · Daloradius
CVE-2022-4630
·
Published
2022-12-21
·
Updated
2022-12-28
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
daloradius versions prior to master
Description
The issue concerns a sensitive cookie without the 'HttpOnly' flag in the GitHub repository lirantal/daloradius. This could potentially allow unauthorized access to sensitive information.
Recommendations
For versions prior to master, update to the master version or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive cookies until the issue is resolved.
Exploit
Fix
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Daloradius