VulnerabilityAnalyzed

CVE-2024-10718

This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information.

HIGH 7.5EPSS 0.33%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set. This could cause the user agent to send those cookies in plaintext over an HTTP session, potentially exposing sensitive information. The issue is fixed in version 1.7.0.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.33% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-614, CWE-319
Affected: phpipam/phpipam
Source: security@huntr.dev

References

https://github.com/phpipam/phpipam/commit/ddf70ef6801442eb8b0be5eea829e470e653c70ePatch
https://huntr.com/bounties/725bce8f-328f-4fbc-acf5-46ea920cd3c1Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.