VULNERABILITY INTELLIGENCE

CVE-2024-35211

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected web server, after a successful login, sets the session cookie on the browser, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”).

Weakness classification

  • productcert@siemens.com: CWE-614

Primary references