CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
A kind of CWE-319 Cleartext Transmission of Sensitive Information.
From the CWE List. © The MITRE Corporation.
Newest
- moxa pt-g503 series, eds-g503 firmware +1 moreCookie Without Secure Flag3.1 Low
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq6.3 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms22.6 Low
- it-novum it-novum/openitcockpit, openitcockpit +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit4.3 Medium
- johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)7.5 High
- pyload, pyload pyload/pyload +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload3.1 Low
- go-macaron csrfMacaron csrf csrf.go missing secure attribute3.7 Low
- usememos memos, usememos/memos +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos4.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq6.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb4.9 Medium
- ikus-soft minarca, ikus060 ikus060/minarca +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca7.5 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb7.5 High
- openshift originInsecure cookies in Openshift Origin5.3 Medium
- itarian on-premise, saas platform / on-premise, saas service desk +2 moreITarian - Session cookie not protected by HttpOnly flag7.5 High
- siemens desigo dxr2, desigo pxc3, desigo pxc4 +5 more +7 moreA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 ...6.5 Medium
- hcl bigfix webuiHCL BigFix WebUI Cookie missing attributes7.4 High
- solarwinds kiwi syslog serverMissing Secure Flag From SSL Cookie3.1 Low
- ledgersmb, ledgersmb ledgersmb/ledgersmb +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb5.9 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreMissing HtppOnly and Secure flags5.3 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...5.8 Medium
- synology router manager, router manager (srm) +1 moreSynology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session...5.8 Medium
- mattermost serverMattermost Server does not check if cookies are used over SSL5.3 Medium
- mauticSensitive Cookie Without HttpOnly and Secure Flag7.5 High