Lucene search
HistoryAug 07, 2014 - 11:13 a.m.
CVE-2014-3852
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.004
Percentile
73.3%
Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected configurations
Node
pyplatepyplateMatch0.08
Related
prion
prion
Design/Logic Flaw
2014-08-07 11:13:00
cvelist
cvelist
CVE-2014-3852
2014-08-07 10:00:00
cve
cve
CVE-2014-3852
2014-08-07 11:13:35
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.004
Percentile
73.3%
Related for NVD:CVE-2014-3852