CVE-2018-1340

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token

published February 7, 2019

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02043 · 80.9th percentile
Published
2019-02-07T22:00Z
EPSS history
Timeline
  • 07 FEB 22:00Z
    Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token
    cvelistv5