CVE-2021-27764CWE-614

HCL BigFix WebUI Cookie missing attributes

High · published May 6, 2022

CVSS v3.1
7.4
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2022-05-06T18:10Z
EPSS history
Timeline
  • 06 MAY 18:10Z
    HCL BigFix WebUI Cookie missing attributes
    cvelistv5