Unrated severityNVD Advisory· Published Jul 15, 2024· Updated Aug 1, 2024

Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag

CVE-2024-6739

Description

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openfind/Mailgatesllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: all
Openfind/MailAuditllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: all

Patches

Vulnerability mechanics

References

www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdfmitrevendor-advisory
www.twcert.org.tw/en/cp-139-7928-04e8a-2.htmlmitrethird-party-advisory
www.twcert.org.tw/tw/cp-132-7927-03837-1.htmlmitrethird-party-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000