CVE-2025-22493 — Improper cookie attributes in Foreseer Reporting Software (FRS)

CVE-2025-22493

Improper cookie attributes in Foreseer Reporting Software (FRS) PUBLISHED

Description (CNA)

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.

Affected (CNA)

Vendor / product	Versions
Eaton / Foreseer Reporting Software (FRS)	affected 0 before 1.5.100

CWE

CWE-319

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.