Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2008-2558

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

  • Published: Jun 5, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-2558
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
cre_loaded / cre_loaded - 6.2.13.1.x