PT-2011-1312 · Hastymail · Hastymail2

Publicado 2011-01-18 · Atualizado 2017-08-17 · CVE-2009-5051

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hastymail2 versions prior to RC 8

Description The issue allows remote attackers to capture the session cookie by intercepting its transmission within an http session, as the secure flag for the session cookie is not set in an https session.

Recommendations For versions prior to RC 8, update to RC 8 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-5051

Produtos afetados

Hastymail2

Referências · 3

• http://hastymail.org/security · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64891 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-5051 · Nota de Segurança