CVE-2024-6739 - Vulnerability Details - OpenCVE

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00088.

Key SSVC decision points have not yet been added.

Vendors	Products
Openfind	Mailaudit Mailgates

Configuration 1 [-]

OR	cpe:2.3:a:openfind:mailaudit::::::::
	cpe:2.3:a:openfind:mailgates::::::::

No data.

No data.

Fixes

Solution

Update MailGates V6.0 to version 6.1.7.040 or later. Update MailAudit V6.0 to version 6.1.7.040 or later.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html

History

Thu, 03 Oct 2024 19:00:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-79	CWE-732

MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2024-07-15T03:15:03.815Z

Updated: 2024-08-01T21:41:04.608Z

Reserved: 2024-07-15T02:57:13.364Z

Link: CVE-2024-6739

Vulnrichment

Updated: 2024-08-01T21:41:04.608Z

NVD

Status : Modified

Published: 2024-07-15T04:15:02.073

Modified: 2024-11-21T09:50:13.223

Link: CVE-2024-6739

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:41:04.608Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6739", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-24T19:15:56.789929Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-24T19:16:04.544Z"}}], "cna": {"title": "Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag", "source": {"advisory": "TVN-202407005", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-31", "descriptions": [{"lang": "en", "value": "CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Openfind", "product": "MailGates", "versions": [{"status": "affected", "version": "all", "lessThan": "V6.0 6.1.7.040", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Openfind", "product": "MailAudit", "versions": [{"status": "affected", "version": "all", "lessThan": "V6.0 6.1.7.040", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update MailGates V6.0 to version 6.1.7.040 or later.\nUpdate MailAudit V6.0 to version 6.1.7.040 or later.", "supportingMedia": [{"type": "text/html", "value": "Update MailGates V6.0 to version 6.1.7.040 or later.<br>Update MailAudit V6.0 to version 6.1.7.040 or later.<br><br>", "base64": false}]}], "datePublic": "2024-07-15T03:08:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html", "tags": ["third-party-advisory"]}, {"url": "https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html", "tags": ["third-party-advisory"]}, {"url": "https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.", "supportingMedia": [{"type": "text/html", "value": "The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1004", "description": "CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2024-07-15T03:17:02.773Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6739", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:41:04.608Z", "dateReserved": "2024-07-15T02:57:13.364Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2024-07-15T03:15:03.815Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}