Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2010-4312

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pvjh-7h8q-q56r

Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.

gitlab/maven/org.apache.tomcat/tomcat/CVE-2010-4312

Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.