CVE-2008-3663

EPSS 1.26%
Veröffentlicht 24.09.2008 14:56:52
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Squirrelmail ≫ Squirrelmail Version1.4.15

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.26%	0.788

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

http://secunia.com/advisories/33937

http://support.apple.com/kb/HT3438

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html

http://int21.de/cve/CVE-2008-3663-squirrelmail.html

http://securityreason.com/securityalert/4304

http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html

http://www.securityfocus.com/archive/1/496601/100/0/threaded

http://www.securityfocus.com/bid/31321

https://exchange.xforce.ibmcloud.com/vulnerabilities/45700

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10548

https://nvd.nist.gov/vuln/detail/CVE-2008-3663

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3663

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3663

EUVD