CVE-2012-4846

IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote…

published December 19, 2012

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01191 · 67.5th percentile
Published
2012-12-19T11:00Z
EPSS history
Timeline
  • 19 DEC 11:00Z
    IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote…
    cvelistv5