CVE-2019-19090
3.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Exploitability: 2.1 / Impact: 1.4
Source: NVD
Description
For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.
Affected (1)
Products: Hitachienergy: Esoms
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.0 to 6.0.2 |
Related CWEs
References (2)
Source: cybersecurity@ch.abb.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.