CVE-2015-3319 in Hotspot Express hotEx Billing Manager
Summary
Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Reservation
04/16/2015
Disclosure
04/16/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 74991 | Hotspot Express hotEx Billing Manager Cookie information disclosure | 200 | Not defined | Not defined | CVE-2015-3319 |