What the vulnerability does
01Description
The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.
CVSS base score
5.7/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Key dates
02Disclosure timeline
November 5, 2021
CVE published
August 4, 2024
Record updated
External resources
