Unrated severityNVD Advisory· Published Jul 15, 2024· Updated Aug 1, 2024
Openfind Mail2000 - HttpOnly flag bypass
CVE-2024-6741
Description
Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdfmitrevendor-advisory
- www.twcert.org.tw/en/cp-139-7941-b66e7-2.htmlmitrethird-party-advisory
- www.twcert.org.tw/tw/cp-132-7940-0177a-1.htmlmitrethird-party-advisory
News mentions
0No linked articles in our index yet.