CVE-2016-6344
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sen…
Published: 2016-09-07 · CVSS: Unscored
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7