CVE-2022-26157

An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3

published February 28, 2022

CVSS
—
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00561 · 45.9th percentile
Published
2022-02-28T15:25Z
EPSS history
Timeline
  • 28 FEB 15:25Z
    An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3
    cvelistv5