CVE-2004-0869

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same…

published February 13, 2005

CVSS

—

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14785 · 96.7th percentile
Published: 2005-02-13T05:00Z

EPSS history

Timeline

13 FEB 05:00Z
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same…
cvelistv5