Security Advisory

CVE-2014-0634

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-28 19:00:00
Last updated 2024-08-06 09:20:19
Assigner dell
CVSS score not scored
State PUBLISHED

Description

EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.