CVE-2016-5409 in OpenShift Enterprise情報

要約

〜によって MITRE

Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2016年06月10日

モデレーション

承諾済み

エントリ

VDB-100362

EPSS

0.00234

KEV

いいえ

アクティビティ

非常低い

セクター

Energy, Hostingprovider, ...

ソース

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5409
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5409
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5409/

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!