CVE-2023-3520 : Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repositor

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6.

Published 2023-07-06 01:15:09

Updated 2023-07-12 15:34:14

Source huntr.dev

View at NVD, CVE.org

Products affected by CVE-2023-3520

It-novum » Openitcockpit
Versions before (<) 4.6.6
cpe:2.3:a:it-novum:openitcockpit:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 33 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	huntr.dev
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.6	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N	2.1	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

Assigned by: security@huntr.dev (Primary)

https://huntr.dev/bounties/f3b277bb-91db-419e-bcc4-fe0b055d2551

huntr: Page not found
Exploit;Patch;Third Party Advisory
https://github.com/it-novum/openitcockpit/commit/6c717f3c352e55257fc3fef2c5dec111f7d2ee6b

ITC-3039 Set all cookies with secure=true. Many thanks to https://git… · it-novum/openITCOCKPIT@6c717f3 · GitHub
Patch

Jump to