Medium severity5.3NVD Advisory· Published Sep 7, 2016· Updated May 6, 2026
CVE-2016-6344
CVE-2016-6344
Description
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/92714nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- rhn.redhat.com/errata/RHSA-2017-0248.htmlnvd
- rhn.redhat.com/errata/RHSA-2017-0249.htmlnvd
News mentions
0No linked articles in our index yet.