Unrated severityNVD Advisory· Published Oct 29, 2020· Updated Sep 17, 2024
CVE-2020-27658
CVE-2020-27658
Description
Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.synology.com/security/advisory/Synology_SA_20_14mitrex_refsource_CONFIRM
- www.talosintelligence.com/vulnerability_reports/TALOS-2020-1086mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.