« Volver al listado

CVE-2014-0634

Estado: ModificadaMedia (6)—

EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Vplex Geosynchrony

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0634",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-01T06:28:18.060",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-03/0157.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie."
    },
    {
      "lang": "es",
      "value": "EMC VPLEX GeoSynchrony 4.x y 5.x anterior a 5.3 no incluye el indicador HTTPOnly en una cabecera Set-Cookie para una cookie no especificada, lo que facilita a atacantes remotos obtener información potencialmente sensible a través de acceso script a esta cookie."
    }
  ],
  "lastModified": "2026-06-17T00:03:24.397",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:vplex_geosynchrony:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C283DEAD-A5DB-4A74-84F6-749BFC265F2E"
            },
            {
              "criteria": "cpe:2.3:a:emc:vplex_geosynchrony:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D536831F-D76F-42CE-9351-3212027C8227"
            },
            {
              "criteria": "cpe:2.3:a:emc:vplex_geosynchrony:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BDBBB7B-19C8-404F-B22F-D3077EEF33F4"
            },
            {
              "criteria": "cpe:2.3:a:emc:vplex_geosynchrony:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E6877D1-61BC-4A30-91AF-0948977B0C8D"
            },
            {
              "criteria": "cpe:2.3:a:emc:vplex_geosynchrony:5.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2A7C8A7-5F49-4B09-B6C1-9F2F2F0A314A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}