CVE-2019-8283

Summary

Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.

Affected Software

Weaknesses

• CWE-1004: CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag

ADP Enrichment

CVE Program Container

Additional References

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-030-hasplm-cookie-without-httponly-attribute/

References

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/06/05/klcert-19-030-hasplm-cookie-without-httponly-attribute/

• ←Previous
• Next→