Back

LOW

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session

Published Sep 11, 2024

Description

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 11, 2024
Updated Jul 5, 2026
Reserved Aug 21, 2024
CISA Vulnrichment
Updated Sep 11, 2024
NVD
Status Modified
Modified Jul 5, 2026
Red Hat
Severity n/a
Public date n/a