Vulnerability in N/a

CVE-2004-0462

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

Public proof-of-concept exploits

References

  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2004-0462?
CVE-2004-0462 is a vulnerability in N/a. Published 2004-12-31.
Is CVE-2004-0462 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.