CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

Score

CVSS 3.1 7.5 High

Status

Modified - security@huntr.dev

Published

2022-09-13

Last modified

2024-08-03

Weaknesses

CWE-311, CWE-614

Affected products

• Rdiffweb (Ikus-soft)
• Ikus060rdiffweb (Ikus060)

References

• https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e
• https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce