CVE-2022-3250CWE-614

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Medium · published September 21, 2022

CVSS v3.0
4.9
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.

The record
Technical detail
CVSS v3.0
4.9 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00545 · 45.0th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2022-09-21T16:55Z
EPSS history
Timeline
  • 21 SEP 16:55Z
    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
    cvelistv5