Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2
CVE-2023-4654

2.6LOW

Key Information:

What is CVE-2023-4654?

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.

instantsoft/icms2 < 2.16.1

Score:

2.6

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2023-4654 Data