CVE-2009-3584

SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by…

published December 23, 2009

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01247 · 69.1th percentile
Published
2009-12-23T18:00Z
EPSS history
Timeline
  • 23 DEC 18:00Z
    SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by…
    cvelistv5