Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-12031 EUVD-2025-35196GHSA-gch7-fp6f-5fp2

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute

Published Oct 21, 2025 · Updated Oct 21, 2025 · Assigned by azure-access

Description

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Affected products

VendorProductAffectedFixed
Azure Access Technology BLU-IC2 ≤ 1.19.5 —
Azure Access Technology BLU-IC4 ≤ 1.19.5 —

References