Advisory details:
github_osv / GHSA-pvjh-7h8q-q56r
| Advisory ID | github_osv/GHSA-pvjh-7h8q-q56r |
| Aliases |
CVE-2010-4312
|
| Summary | Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE |
| Reference id | Reference type | URL |
|---|---|---|
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608286 | ||
| https://github.com/apache/tomcat | ||
| CVE-2010-4312 | https://launchpad.net/bugs/cve/CVE-2010-4312 | |
| CVE-2010-4312 | https://nvd.nist.gov/vuln/detail/CVE-2010-4312 | |
| CVE-2010-4312 | https://security-tracker.debian.org/tracker/CVE-2010-4312 | |
| CVE-2010-4312 | https://ubuntu.com/security/CVE-2010-4312 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.