Executive brief
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
Affected products
- Maven org.apache.tomcat:tomcat
Junglewise Threat Intelligence
CVE-2010-4312: Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
CVE-2010-4312 · Severity: info · Published 2022-05-14
Technologies: org.apache.tomcat:tomcat (Maven). Vendors: Maven.
Related threats
- Deserialization of Untrusted Data in Apache Tomcat
- Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
- Apache Tomcat Allows Replacing of XML Parser
- Apache Tomcat does not follow ServletSecurity annotations
- Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users