CVE Daily

CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an...

Medium CVSS 5.0

Overview

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

CWE: CWE-16 Published: 2011-01-18T18:03:06.533
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags