CVE-2018-1340 in Guacamole信息

摘要

由 MITRE

Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2017-12-07

管理

已接受

条目

VDB-130629

CPE

准备好

CWE

CWE-200 (已确认)

CVSS

7.5 (NVD)

EPSS

0.00633

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-1340
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-1340
CVE Details	https://www.cvedetails.com/cve/CVE-2018-1340/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!