CVE-2008-2558 in CRE Loaded

Summary

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 06/05/2008
• Disclosure: 06/05/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-42677
• CPE: ready
• CWE: CWE-310 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00250
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-2558
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-2558
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-2558/