CVE-2004-0462

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user…

published May 10, 2005

CVSS
—
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.2th percentile
Published
2005-05-10T04:00Z
EPSS history
Timeline
  • 10 MAY 04:00Z
    The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user…
    cvelistv5