PT-2019-18964 · Gemalto · Gemalto Admin Control Center

Publicado 2019-06-07 · Atualizado 2021-09-14 · CVE-2019-8283

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gemalto Admin Control Center versions prior to 7.92

Description The issue concerns the Hasplm cookie, which lacks the 'HttpOnly' flag, allowing malicious javascript to steal it.

Recommendations For versions prior to 7.92, consider setting the 'HttpOnly' flag for the Hasplm cookie to prevent malicious javascript from accessing it.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

CWE-1004

Identificadores relacionados

CVE-2019-8283

Produtos afetados

Gemalto Admin Control Center

Referências · 3

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-030-hasplm-cookie-without-httponly-attribute · Nota
• https://osv.dev/vulnerability/CVE-2019-8283 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8283 · Nota de Segurança