VDB

GCVE-110-CERTCC-2014-804060

GCVE-110-CERTCC-2014-804060
Advisory PublishedCVSS 6.8/10
Vulnetix · Advisory published August 13, 2015
RFC 6265 (previously RFC 2965) established HTTP State Management, also known as "cookies". In most web browser implementations of RFC 6265, cookies set via HTTP requests may allow a remote attacker to bypass HTTPS and reveal private session information.
Download JSON Open in Console

Risk Scores

CVSS 2.0
6.8/10
Medium · AV:N/AC:M/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score5.8remediation_levelWreport_confidenceCenvironmental_score5.83309718830125target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

References

Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
advisory
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
url
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›