CWE-539: Use of Persistent Cookies Containing Sensitive Information
The web application uses persistent cookies, but the cookies contain sensitive information.
A kind of CWE-552 Files or Directories Accessible to External Parties.
From the CWE List. © The MITRE Corporation.
Newest
- djangoproject django Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST 2.3 Low
- sap se businessobjects business intelligence platform Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform 4.2 Medium
- hcl aion HCL AION is susceptible to Missing Content-Security-Policy 3.1 Low
- fs s3150-8t2f firmware FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless... 7.5 High
- printerlogic vasion print, virtual appliance +1 more Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923... 9.1 Critical
- advantech adam-5630, adam-5630 firmware +1 more Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information 8.5 High
- pallets flask Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header 7.5 High
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 more A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.... 5.3 Medium