admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-01 03:00:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2008/CVE-2008-3102.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

709 B
Raw Blame History

CVE-2008-3102

Description

Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

POC

Reference

Github

No PoCs found on GitHub currently.