Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-29024 EUVD-2020-21406GHSA-4m2f-xx7g-q89c

Missing HtppOnly and Secure flags

Published Feb 16, 2021 · Updated Sep 16, 2024 · Assigned by Secomea

Description

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.

Affected products

VendorProductAffectedFixed
Secomea GateManager all – < 9.3 9.3

References