CVE-2004-0871

Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which…

published February 13, 2005

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.1th percentile
Published
2005-02-13T05:00Z
EPSS history
Timeline
  • 13 FEB 05:00Z
    Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which…
    cvelistv5