Description (CNA)
Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the management interface by using this vulnerability in combination with a successful Cross-Site Scripting attack on a user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ITarian / ITarian SaaS platform / on-premise | affected any version before 6.35.37347.20040 |
CWE
CWE-614
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.