← CVE Intelligence

CVE-2021-42115

Missing HTTPOnly flag on sensitive cookie in TopEase PUBLISHED

Description (CNA)

Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an unauthenticated remote attacker to escalate privileges from unauthenticated to authenticated user via stealing and injecting the session- independent and static cookie UID.

Affected (CNA)

Vendor / productVersions
Business-DNA Solutions GmbH / TopEaseaffected unspecified through 7.1.27

CWE

CWE-1004

References

ADP enrichment

CVE

No English description supplied.