En bref
- CVE-2018-1340 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant org.apache.guacamole:guacamole-common, guacamole (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.0%, plus élevée que 81.2% des vulnérabilités.
- Correctif : mettre à jour vers 1.0.0 ou plus récent.
Description
Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.
NVD description
Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.
Autres vulnérabilités de org.apache.guacamole:guacamole-common
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free