Sensitive Cookies Vulnerability in Networking Devices by Multiple Vendors

CVE-2004-0462

What is CVE-2004-0462?

Various networking devices have a vulnerability that arises from the failure to set the Secure attribute for sensitive cookies during HTTPS sessions. As a result, these cookies may be transmitted in plaintext if the same server is accessed through an HTTP session. This flaw compromises the confidentiality of user sessions and may lead to unauthorized access if exploited by malicious actors. It is crucial for administrators to review their device settings to mitigate this risk and safeguard sensitive information.

References