Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-9634
5
MEDIUMCVSS v2
Published
September 12, 2017
Affected
6 projects
Assigned by
Red Hat
Severity scale
010
Description
Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to capture cookies by intercepting their transmission within an HTTP session.
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 7.0.41, = 7.0.42, = 7.0.43, = 7.0.44, = 7.0.45, = 7.0.46, = 7.0.47, = 7.0.48, = 7.0.49, = 7.0.50, = 7.0.51, = 7.0.54, = 7.0.55, = 7.0.56, = 7.0.57, = 7.0.58, = 7.0.59, = 7.0.60, = 7.0.61, = 7.0.62, = 7.0.63, = 7.0.64, = 7.0.65, = 7.0.66, = 7.0.67, = 7.0.68, = 7.0.69, = 7.0.70, = 7.0.71, = 7.0.72, = 7.0.73, = 7.0.74, = 7.0.75, = 7.0.76, = 7.0.77, = 7.0.78, = 7.0.79, = 7.0.80, = 7.0.81NVD
NPM
Docker Hub
RubyGems