Lucene search
Redhat.comRH:CVE-2016-5409HistoryAug 12, 2016 - 4:19 a.m.
CVE-2016-5409
2016-08-1204:19:16
redhat.com
access.redhat.com
16
EPSS
0.003
Percentile
69.0%
Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Related
nvd
nvd
CVE-2016-5409
2017-04-20 17:59:00
cve
cve
CVE-2016-5409
2017-04-20 17:59:00
cvelist
cvelist
CVE-2016-5409
2017-04-20 17:00:00
prion
prion
Design/Logic Flaw
2017-04-20 17:59:00