medium6.5
CVE-2019-8283
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag.
Impact
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gemalto | Sentinel Ldk | before 7.92 |