Vulnerabilities > CVE-2019-14849 - Unspecified vulnerability in Redhat 3Scale 2.0/2.4
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |