Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-1340HistoryFeb 07, 2019 - 10:29 p.m.
CVE-2018-1340
2019-02-0722:29:00
Debian Security Bug Tracker
security-tracker.debian.org
14
EPSS
0.001
Percentile
50.6%
Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user’s session token. This cookie lacked the “secure” flag, which could allow an attacker eavesdropping on the network to intercept the user’s session token if unencrypted HTTP requests are made to the same domain.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | guacamole-client | <= 0.9.9+dfsg-1 | guacamole-client_0.9.9+dfsg-1_all.deb |
Related
osv
osv
Missing Encryption of Sensitive Data in Apache Guacamole
2022-05-13 01:49:47
CVE-2018-1340
2019-02-07 22:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: guacamole-server-1.0.0-1.fc29
2019-03-12 22:19:32
[SECURITY] Fedora 28 Update: guacamole-server-1.0.0-1.fc28
2019-03-12 21:45:05
cvelist
cvelist
CVE-2018-1340
2019-02-07 22:00:00
github
github
Missing Encryption of Sensitive Data in Apache Guacamole
2022-05-13 01:49:47
nessus
nessus
Fedora 28 : guacamole-server (2019-6c52489ec5)
2019-03-13 00:00:00
Fedora 29 : guacamole-server (2019-c692dd910d)
2019-03-13 00:00:00
cve
cve
CVE-2018-1340
2019-02-07 22:29:00
openvas
openvas
Fedora Update for guacamole-server FEDORA-2019-c692dd910d
2019-05-07 00:00:00
Fedora Update for guacamole-server FEDORA-2019-6c52489ec5
2019-03-13 00:00:00
Mageia: Security Advisory (MGASA-2021-0272)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2018-1340
2019-02-07 00:00:00
prion
prion
Code injection
2019-02-07 22:29:00
veracode
veracode
Insecure Cookie Configuration
2019-07-10 04:47:32
nvd
nvd
CVE-2018-1340
2019-02-07 22:29:00
mageia
mageia
Updated guacd packages fix security vulnerabilities
2021-06-23 20:11:28