CVE-2020-14248

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests…

published December 16, 2020

CVSS
—
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00672 · 51.5th percentile
Published
2020-12-16T14:11Z
EPSS history
Timeline
  • 16 DEC 14:11Z
    BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests…
    cvelistv5