CVE-2017-1000046

High

Mautic 2.6.1 and earlier fails to set flags on session cookies

mitre·NVD-CWE-noinfo·Published 2017-07-13

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

62 chars

Mautic 2.6.1 and earlier fails to set flags on session cookies

NVDen

62 chars

Mautic 2.6.1 and earlier fails to set flags on session cookies

OSV.deven

59 chars

Mautic prior to 2.1.1 fails to set flags on session cookies

GHSAen

59 chars

Mautic prior to 2.1.1 fails to set flags on session cookies

NVDes

105 chars

En Mautic versión 2.6.1 y anteriores, se presenta un fallo al ajustar las flags en las cookies de sesión.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N