Skip to content
OpenAdvisories

Weakness (CWE)

CWE-315: Cleartext Storage of Sensitive Information in a Cookie

Variant Draft

The product stores sensitive information in cleartext in a cookie.

Source: MITRE CWE-315

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-24768

    1Panel set-cookie is missing the Secure keyword

    1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patc…

    1Panel-dev 1Panel github.com/1Panel-dev/1Panel Go
  • Medium 5.5
    CVE-2021-34564

    In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

    Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

    Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH WHA-GW-F2D2-0-AS- Z2-ETH.EIP ICS / OT