CWE-614 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-614/ Sun, 26 Feb 2023 09:10:07 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-614 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-614/ 32 32 CVE-2008-3662 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3662/ Sun, 26 Feb 2023 09:10:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3662/ Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-3662 appeared first on CVE Vulnerability.

]]> Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-3662 appeared first on CVE Vulnerability.

]]> CVE-2008-3663 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3663/ Sun, 26 Feb 2023 09:10:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3663/ Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-3663 appeared first on CVE Vulnerability.

]]> Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-3663 appeared first on CVE Vulnerability.

]]> CVE-2008-0128 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0128/ Sun, 26 Feb 2023 09:08:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0128/ The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-0128 appeared first on CVE Vulnerability.

]]> The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The post CVE-2008-0128 appeared first on CVE Vulnerability.

]]>