VULNERABILITY INTELLIGENCE
CVE-2014-0634
CVSS score6 MEDIUM
EPSS probability0.96%
CISA KEVNot currently listed
Published2014-04-01
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Weakness classification
- CWE-20: Improper Input Validation