CWE-1004

CWE-1004

  • Severity: LOW
  • CVE: CWE-1004
  • Affected Hardware: BLU-IC2, BLU-IC4
  • Firmware Version: 1.19.5
  • Mitigations: NO
  • Reported by: Kevin Schaller, Benjamin Lafois, Alexi Bitsios, Sebastian Toscano, Dominik Schneider
  • Active exploitation of vulnerability: NO
  • Description: HTTP Security Misconfiguration – Lacking Secure and HTTPOnly Attribute
  • Which versions patch releases are available for: 1.20