CVE-2019-19090

ABB eSOMS: Secure Flag not set

Low · published April 2, 2020

CVSS v3.1
3.5
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Published
2020-04-02T19:46Z
EPSS history
Timeline
  • 02 APR 19:46Z
    ABB eSOMS: Secure Flag not set
    cvelistv5