CVE-2019-8283CWE-1004

Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag

published June 7, 2019

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01187 · 67.6th percentile
Weakness
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag
Published
2019-06-07T14:18Z
EPSS history
Timeline
  • 07 JUN 14:18Z
    Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag
    cvelistv5