Beveiligingsadvies

CVE-2014-9635

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-09-12 14:00:00

Laatst bijgewerkt 2024-08-06 13:47:41

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies.

← Alle CVE's bekijken Bekijk op cve.org ↗