Vulnerability in Cre Loaded

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.

Affected products

Cre_loaded
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (URL Repurposed, x_refsource_MISC)