← Database

CVE-2021-40649

MEDIUM CVSS: 6.5 Published: 2022-06-14 Modified: 2026-07-09

Description

In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.

Affected Platforms

Softwareag Connx

Weakness Type

CWE-732

References