CVE

Id
79125  
CVE No.
CVE-2015-1848  
Status
Candidate  
Description
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720715 79125 CVE-2015-1848 CONFIRM:https://bugzilla.redhat.com/attachment.cgi?id=1009855  View
720716 79125 CVE-2015-1848 FEDORA:FEDORA-2015-8761  View
720717 79125 CVE-2015-1848 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159374.html  View
720718 79125 CVE-2015-1848 FEDORA:FEDORA-2015-8765  View
720719 79125 CVE-2015-1848 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159412.html  View
720720 79125 CVE-2015-1848 FEDORA:FEDORA-2015-8788  View
720721 79125 CVE-2015-1848 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159401.html  View
720722 79125 CVE-2015-1848 REDHAT:RHSA-2015:0980  View
720723 79125 CVE-2015-1848 URL:http://rhn.redhat.com/errata/RHSA-2015-0980.html  View
720724 79125 CVE-2015-1848 REDHAT:RHSA-2015:0990  View
720725 79125 CVE-2015-1848 URL:http://rhn.redhat.com/errata/RHSA-2015-0990.html  View
720726 79125 CVE-2015-1848 BID:74623  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7989 JVNDB-2015-003309 UNIX 上で稼動する IBM InfoSphere DataStage における実行可能なファイルに書き込まれる脆弱性 UNIX 上で稼動する IBM InfoSphere DataStage には、実行可能なファイルに書き込まれ、その結果、root 権限を取得される脆弱性が存在します。 CVE-2015-1900 79125 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003309.html  View