Advisories · Weakness
CWE-614.
Every Advisory and CVE whose sources give the weakness CWE-614, newest first.
- CVSS 4.9 Medium
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
- CWE-614
<2.4.6 · fixed in 2.4.6
GHSA-m748-hjqg-rpp8 · CVE-2022-3250 - CVSS 7.5 High
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca
- ikus060/minarca
- CWE-614
- CVSS 7.5 High
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
- Weak cryptography or TLS
- CWE-614
>=2.4.1, <2.4.2 · fixed in 2.4.2
GHSA-mjw4-xvx6-3grg · CVE-2022-3174 - CVSS 7.5 High
ITarian - Session cookie not protected by HttpOnly flag
- ITarian SaaS platform / on-premise
- CWE-614
- CVSS 7.5 High
Sensitive Cookie Without HttpOnly and Secure Flag
- CWE-614
<2.1.1 · fixed in 2.1.1
GHSA-8255-qf34-44mp · CVE-2017-1000046 -
Siemens Desigo DXR2: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)…
- Siemens Desigo DXR2
- Siemens Desigo PXC3
- CWE-614
- CVSS 7.4 High
HCL BigFix WebUI Cookie missing attributes
- HCL Software HCL BigFix WebUI
- CWE-614
- CVSS 3.1 Low
Missing Secure Flag From SSL Cookie
- SolarWinds Kiwi Syslog Server
- CWE-614
- CVSS 5.9 Medium
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- CWE-614
- CVSS 5.3 Medium
Missing HtppOnly and Secure flags
- Secomea GateManager
- CWE-614
- CVSS 5.8 Medium
Synology DiskStation Manager (DSM): Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for…
- Synology DiskStation Manager (DSM)
- CWE-614
- CVSS 5.8 Medium
Synology Router Manager (SRM): Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the…
- Synology Router Manager (SRM)
- CWE-614