← Back

CVE-2008-2558

nvd nist
Published: Jun 5, 2008Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.

Affected (1)

Cre Loaded
1 product
Cre Loaded
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cre Loaded
Up to 6.2.13.1

Related CWEs

CWE-310
CWE-310

References (4)

Source: cve@mitre.org
URL Repurposed
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
URL Repurposed
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.