| ID | CVE-2024-6739 | ||||||
| Sažetak | The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS. | ||||||
| Reference | |||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | ||||||
| Zadnje važnije ažuriranje | 03-10-2024 - 18:39 | ||||||
| Objavljeno | 15-07-2024 - 04:15 |
