CVE-2020-29024CWE-614

Missing HtppOnly and Secure flags

Medium · published February 16, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2021-02-16T15:07Z
EPSS history
Timeline
  • 16 FEB 15:07Z
    Missing HtppOnly and Secure flags
    cvelistv5