Beveiligingsadvies

CVE-2004-0871

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-02-13 05:00:00
Laatst bijgewerkt 2024-08-08 00:31:47
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."