PT-2014-3729 · Emc · Emc Vplex Geosynchrony
Publicado
2014-03-28
·
Atualizado
2014-04-01
·
CVE-2014-0634
CVSS v2.0
6.0
Média
| Vetor | AV:N/AC:M/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
EMC VPLEX GeoSynchrony versions 4.x through 5.x before 5.3
Description
The issue makes it easier for remote attackers to obtain potentially sensitive information via script access to an unspecified cookie, as the HTTPOnly flag is not included in a Set-Cookie header.
Recommendations
For versions 4.x through 5.x before 5.3, update to version 5.3 or later to resolve the issue.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Emc Vplex Geosynchrony