PT-2022-11291 · Connx · Connx

L00Neyhacker · Published 2022-06-14 · Updated 2022-06-22 · CVE-2021-40650

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Connx version 6.2.0.1269

Description The issue arises when the application issues a cookie without setting the secure flag.

Recommendations For Connx version 6.2.0.1269, ensure that all cookies issued by the application have the secure flag set to mitigate the risk.

Exploit

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2021-40650

Affected Products

Connx

References · 4

• 🔥 https://github.com/l00neyhacker/CVE-2021-40650 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-40650 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40650 · Vendor Advisory
• http://connx.com · Note