Sensitive Cookie Without 'HttpOnly' Flag
CWE-1004
The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.
We track 11 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
How this weakness is prevented
- Implementation: Leverage the HttpOnly flag when setting a sensitive cookie in a response.
Latest Sensitive Cookie Without 'HttpOnly' Flag vulnerabilities
- 7.4 High severity
OpenAM: Sensitive Cookie Without 'HttpOnly' Flag
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent f
- 8.1 High severity
budibase: Sensitive Cookie Without 'HttpOnly' Flag
Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.ts:218. JavaScript can read this cookie via document.cookie.
- 8.0 High severity
CRM: Improper Neutralization of Input During Web Page Generation
ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting (Stored XSS) vulnerability in the admin panel’s group-creation feature allows any user with group-creation privileges to inject malicious JavaScript that execut
- 8.8 High severity
300Mbps Wireless Router F3 and N300 Easy Setup…: Sensitive Cookie Without 'HttpOnly' Flag
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulne
- 7.5 High severity
Trufusion Enterprise: Sensitive Cookie Without 'HttpOnly' Flag
TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPortal/getProjectList. However, the application uses a static key to create the encrypted cookie, ultimately allowing anyon
- 8.7 High severity
XPON ONU Wi-Fi Router (DG-GR6821AC): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies t
- 9.0 Critical severity
PhoenixCart: Improper Neutralization of Input During Web Page Generation
CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once
- 8.6 High severity
CP-XR-DE21-S Router: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succe
- 7.5 High severity
Aspera Console: Incorrect Permission Assignment for Critical Resource
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie.
- 7.5 High severity
Security Directory Integrator: Incorrect Permission Assignment for Critical Resource
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obt
- 7.5 High severity
SyroTech SY-GPON-1110-WDONT router: Incorrect Permission Assignment for Critical Resource
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an