CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
cre_loadedcre_loaded
𝑥
≤ 6.2.13.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://oscommerceuniversity.com/lounge/index.php?topic=255.0
https://exchange.xforce.ibmcloud.com/vulnerabilities/42889
http://oscommerceuniversity.com/lounge/index.php?topic=255.0
https://exchange.xforce.ibmcloud.com/vulnerabilities/42889