title: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit
description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6.
problem types: CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
affected:
{
vendor: it-novum
product: it-novum/openitcockpit
versions:
version: unspecified, lessThan: 4.6.6, status: affected, versionType: custom
}
metrics:
cvssV3_0: [
version: 3.0
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
baseScore: 4.3
baseSeverity: MEDIUM
]