CVE-2014-0634 EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sens...
MediumCVSS 6.0
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc vplex geosynchrony | = 4.0 | No fix listed |
| emc vplex geosynchrony | = 5.0 | No fix listed |
| emc vplex geosynchrony | = 5.1 | No fix listed |
| emc vplex geosynchrony | = 5.2 | No fix listed |
| emc vplex geosynchrony | = 5.2.1 | No fix listed |