CVE-2024-35211

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”).
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:*

History

06 Aug 2024, 15:10

Type Values Removed Values Added
First Time Siemens sinec Traffic Analyzer
Siemens
References () https://cert-portal.siemens.com/productcert/html/ssa-196737.html - () https://cert-portal.siemens.com/productcert/html/ssa-196737.html - Patch, Vendor Advisory
CPE cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:*
Summary
  • (es) Se ha identificado una vulnerabilidad en SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (Todas las versiones &lt; V1.2). El servidor web afectado, después de iniciar sesión correctamente, establece la cookie de sesión en el navegador, sin aplicar ningún atributo de seguridad (como "Secure", "HttpOnly" o "SameSite").

11 Jun 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-11 12:15

Updated : 2024-08-06 15:10


NVD link : CVE-2024-35211

Mitre link : CVE-2024-35211

CVE.ORG link : CVE-2024-35211


JSON object : View

Products Affected

siemens

  • sinec_traffic_analyzer
CWE
CWE-614

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute