Lucene search
Redhat.comRH:CVE-2016-6344HistoryAug 31, 2016 - 7:48 a.m.
CVE-2016-6344
2016-08-3107:48:32
redhat.com
access.redhat.com
6
0.002 Low
EPSS
Percentile
64.8%
It was discovered that JBoss BRMS 6 and BPM Suite 6 are not setting HttpOnly flags on sensitive cookies. Remote attackers can access these cookies by using client-side scripts, usually through XSS.
Related
prion
prion
Design/Logic Flaw
2016-09-07 18:59:00
cvelist
cvelist
CVE-2016-6344
2016-09-07 18:00:00
cve
cve
CVE-2016-6344
2016-09-07 18:59:00
nvd
nvd
CVE-2016-6344
2016-09-07 18:59:00
redhat
redhat
(RHSA-2017:0248) Moderate: Red Hat JBoss BRMS security update
2017-02-02 20:26:59
(RHSA-2017:0249) Moderate: Red Hat JBoss BPM Suite security update
2017-02-02 20:27:13