漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
HTTPS会话中未设置’Secure’属性的敏感Cookie
Vulnerability Title
Eaton Intelligent Power Protector 安全漏洞
Vulnerability Description
Eaton Intelligent Power Protector是美国伊顿(Eaton)公司的一款电源保护软件。 Eaton Intelligent Power Protector存在安全漏洞,该漏洞源于不安全的cookie配置,可能导致基于网络的攻击者拦截cookie并实施中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A