CVE-2012-4846 in IBM Lotus Notes
Resumen (Inglés)
IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, aka SPRs JMAS7TRNLN and SRAO8U3Q68.
Reservar
2012-09-06
Divulgación
2012-12-19
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 7191 | IBM Lotus Notes Web Application divulgación de información | 200 | No probado | Arreglo oficial | CVE-2012-4846 |