PT-2019-18964 · Gemalto · Gemalto Admin Control Center

Published 2019-06-07 · Updated 2021-09-14 · CVE-2019-8283

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gemalto Admin Control Center versions prior to 7.92

Description The issue concerns the Hasplm cookie, which lacks the 'HttpOnly' flag, allowing malicious javascript to steal it.

Recommendations For versions prior to 7.92, consider setting the 'HttpOnly' flag for the Hasplm cookie to prevent malicious javascript from accessing it.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

CWE-1004

Related Identifiers

CVE-2019-8283

Affected Products

Gemalto Admin Control Center

References · 3

• https://osv.dev/vulnerability/CVE-2019-8283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8283 · Security Note
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-030-hasplm-cookie-without-httponly-attribute · Note