A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”).
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: siemens
Published: 2024-06-11T11:15:53.465Z
Updated: 2024-06-12T19:46:37.879Z
Reserved: 2024-05-13T17:54:10.656Z
Link: CVE-2024-35211
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-06-11T12:15:17.643
Modified: 2024-06-11T13:54:12.057
Link: CVE-2024-35211
JSON object: View
Redhat Information
No data.
CWE