CVE-2023-4217CWE-1004

Session cookies attribute not set properly

Low · published November 2, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag
Published
2023-11-02T16:04Z
EPSS history
Timeline
  • 02 NOV 16:04Z
    Session cookies attribute not set properly
    cvelistv5