Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_high_availability_eus:6.6.z:*:*:*:*:*:*:*

part: o version: 6.6.z update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux High Availability Eus (2ce63eed-5061-51cc-aa03-7ffaf3ed4d7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1848 vulnerable 2026-06-08 05:06:26.432295 Details available
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.
Published: 2015-05-14T14:00:00.000Z
Updated: 2024-08-06T04:54:16.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.