Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3
CVE-2015-3983
- EPSS 0.6%
- Veröffentlicht 14.05.2015 14:59:12
- Zuletzt bearbeitet 12.04.2025 10:46:40
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was...
6.8
CVE-2015-1848
- EPSS 1.21%
- Veröffentlicht 14.05.2015 14:59:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this iss...
1