VULNERABILITY INTELLIGENCE

CVE-2024-44575

CVSS score3.7 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-09-11
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references