Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat JBoss BPMS 远程信息泄露漏洞
Vulnerability Description
Red Hat JBoss BPM Suite是美国红帽（Red Hat）公司的一套集合了JBoss BRMS所有功能的业务流程管理平台。该平台可为建模、自动化、模拟化和业务流程监控提供额外支持。 Red Hat JBoss BPMS 6.3.x版本中存在安全漏洞，该漏洞源于会话cookie中没有在Set-Cookie头中包含HTTPOnly标志。远程攻击者可利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A