CVE-2013-4725

DDSN Interactive cm3 Acora CMS 6.0.6/1a-5.5.7/12b - Info Disclosure

Title source: llm
STIX 2.1

Description

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/96664

Scores

EPSS 0.0117
EPSS Percentile 63.7%

Details

CWE
CWE-200
Status published
Products (4)
ddsn/cm3_acora_content_management_system 5.5.0\/1b-p1
ddsn/cm3_acora_content_management_system 5.5.7\/12b
ddsn/cm3_acora_content_management_system 6.0.2\/1a
ddsn/cm3_acora_content_management_system 6.0.6\/1a
Published Jun 06, 2014
Tracked Since Feb 18, 2026