CVE-2008-3102

Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

Published : 2008-09-24 11:42 Updated : 2018-10-11 20:45

5.0
CVSS Score More info
Score 5.0 / 10
5.0
Vendor Product Version URI
Mantisbt Mantisbt 1.1.0 cpe:/a:mantisbt:mantisbt:1.1.0
Mantisbt Mantisbt 1.1.1 cpe:/a:mantisbt:mantisbt:1.1.1
Mantisbt Mantisbt 1.2.0a2 cpe:/a:mantisbt:mantisbt:1.2.0a2
Mantisbt Mantisbt 1.2.0a1 cpe:/a:mantisbt:mantisbt:1.2.0a1
Mantisbt Mantisbt 1.1.2 cpe:/a:mantisbt:mantisbt:1.1.2
  1. Mantisbt (1) Search CVE
    1. Mantisbt (5) Search CVE
      1. 1.1.0
      2. 1.1.1
      3. 1.2.0a2
      4. 1.2.0a1
      5. 1.1.2

CWE

ID Name Description Links
CWE-310 Cryptographic Issues Weaknesses in this category are related to the use of cryptography. CVE