PT-2004-1584 · Undefined · Undefined

Hiromitsu Takagi · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-0462

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Multiple networking devices (affected versions not specified)

Description The issue concerns the built-in web servers of multiple networking devices, which fail to set the Secure attribute for sensitive cookies during HTTPS sessions. This could lead to the user agent sending these cookies in plaintext over an HTTP session with the same server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0462

Produtos afetados

Undefined

Referências · 3

• http://kb.cert.org/vuls/id/546483 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17702 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0462 · Nota de Segurança