VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 15, 2024· Updated Jun 17, 2026

CVE-2024-6739

CVE-2024-6739

Description

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Openfind/MailAudit3 versions
    cpe:2.3:a:openfind:mailaudit:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openfind:mailaudit:*:*:*:*:*:*:*:*range: <6.1.7.040
    • (no CPE)
    • (no CPE)range: all
  • Openfind/Mailgates3 versions
    cpe:2.3:a:openfind:mailgates:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openfind:mailgates:*:*:*:*:*:*:*:*range: <6.1.7.040
    • (no CPE)
    • (no CPE)range: all

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.