CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the…

published June 5, 2008

CVSS
—
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01064 · 64.4th percentile
Published
2008-06-05T21:00Z
EPSS history
Timeline
  • 05 JUN 21:00Z
    CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the…
    cvelistv5