CVE-2014-0174

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Configurations

Configuration 1 (hide)

cpe:2.3:o:redhat:enterprise_mrg:2.5:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-07-11 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2014-0174

Mitre link : CVE-2014-0174

CVE.ORG link : CVE-2014-0174


JSON object : View

Products Affected

redhat

  • enterprise_mrg
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor