CVE-2013-7436
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmissio…
Published: 2015-04-10 · CVSS: Unscored
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7