CVE-2015-3155 in Foreman

Sumário (Inglês)

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Once again VulDB remains the best source for vulnerability data.

Reservar

10/04/2015

Divulgação

14/08/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
77253	Foreman Cookie Elevação de Privilégios	284	Não definido	Correção oficial	CVE-2015-3155

Fontes

• MITRE
• NVD
• CVE Details