medium6.0
CVE-2014-0634
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for re…
Impact
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Vplex Geosynchrony | Versions 4.0, 5.0, 5.1, 5.2, 5.2.1 |