CWE-565: Reliance on Cookies without Validation and Integrity Checking
The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- reactphp httpReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent5.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a...6.5 Medium
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a...5.3 Medium
- cellinx nvt - ip ptz camera, nvt - ip ptz camera firmware +1 moreCellinx NVT – IP PTZ Camera Privilege Escalation8.2 High
- textpatternTextpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session...4.3 Medium
- unspecified monyog ultimate, ideracorp webyog monyog ultimate +1 moreMONyog Ultimate Cookie privileges management7.3 High
- guzzle, debian linux, drupal +2 moreCross-domain cookie leakage in Guzzle8.0 High
- zoom meetings, zoom video communications inc client for meetings for android, client for meetings for ios +3 more +5 moreImproperly constrained session cookies in Zoom Client for Meetings5.9 Medium
- fantec mwid25-ds firmwareAn issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write...7.2 High
- gitlabImproper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11...5.3 Medium
- dell unisphere for powermax, powermax os, solutions enabler +4 more +6 moreUnisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability....6.3 Medium
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parse7.5 High
- discourse rails multisiteSecure/signed cookies share secrets between sites in rails_multisite8.3 High
- getgrav getgrav/grav, grav +1 moreReliance on Cookies without Validation and Integrity Checking in getgrav/grav6.3 Medium
- circutor sge-plc1000, sge-plc1000 firmware +1 moreCircutor SGE-PLC1000 improper authentication8.8 High
- fastify fastify-csrfLack of protection against cookie tossing attacks in fastify-csrf6.5 Medium
- deltaflow project deltaflow, vangene deltaflow e-platform +1 moreVangene deltaFlow E-platform - Broken Authentication9.8 Critical
- dmasoftlab dma radius managerDMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The...9.8 Critical
- sympa, debian linux, fedoraproject fedora +2 moreSympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any...3.7 Low
- mozilla firefox, firefox mobile +1 moreWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization...4.3 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sent4.3 Medium
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on...3.7 Low
- octobercms octoberReliance on Cookies without validation in OctoberCMS6.1 Medium
- ibm security secret serverIBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or...3.7 Low
- ipa, freeipa +1 moreipa 3.0 does not properly check server identity before sending credential containing cookies8.8 High
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for...3.1 Low
- centreon vmCentreon Does Not Set HTTPOnly Flag7.5 High
- ibm websphere application serverIBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive...5.3 Medium
- nortekcontrol linear emerge 5000p firmware, linear emerge 50p firmware +1 moreLinear eMerge 50P/5000P devices allow Authentication Bypass.9.8 Critical
- cdatatec epon cpe-wifi devices firmwareEPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1...9.8 Critical
- laobancmsAn issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and...7.5 High
- picturesproPicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access...9.8 Critical
- moxa oncell g3110-hspa-t firmware, oncell g3110-hspa firmware, oncell g3150-hspa-t firmware +1 more +3 moreA Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa...9.8 Critical
- cloudfoundry capi-release, cf-release, cloud foundry +1 more +3 moreThe Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0,...6.6 Medium
- unitrends enterprise backupAn unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to...9.8 Critical
- digisol dg-hr1400 router firmwarePrivilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an...8.8 High
- google chrome, apple iphone os, safari +2 moreGoogle Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote...5.0 Medium
- v3chat v3 chat profiles dating scriptV3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain...9.8 Critical