Description
Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP Disclosure Management | < 10.1 | — |
Medium · 6.3
CVE-2020-6267
EUVD-2020-27417GHSA-wjw2-9cj6-hcph
Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only…
Published Jul 14, 2020 · Updated Aug 4, 2024 · Assigned by sap