Lucene search
MitreCVE-2014-3852HistoryAug 07, 2014 - 11:13 a.m.
CVE-2014-3852
2014-08-0711:13:35
CWE-200
mitre
web.nvd.nist.gov
24
pyplate
0.08
set-cookie
httponly
cve-2014-3852
security
information disclosure
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
73.3%
Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected configurations
Node
pyplatepyplateMatch0.08
Related
prion
prion
Design/Logic Flaw
2014-08-07 11:13:00
nvd
nvd
CVE-2014-3852
2014-08-07 11:13:35
cvelist
cvelist
CVE-2014-3852
2014-08-07 10:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
73.3%
Related for CVE-2014-3852