CVE-2008-6298 Security feature bypass in n/a
Remote attackers can bypass access restrictions for character encoding and cookie secure flags in sISAPILocation via HTTP header rewrite functions.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2008-6298?
CVE-2008-6298 is a medium-severity vulnerability in n/a, published on 26 Feb 2009. It can be exploited over the network.
Official description
Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."
Weakness: CWE-20
Which versions are affected by CVE-2008-6298?
It affects 1 product.
Products include Rocketeer.dip Sisapilocation.
How do I fix CVE-2008-6298?
No fix has been published for CVE-2008-6298 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-6298 being exploited?
There is no known exploitation of CVE-2008-6298 in the wild and no public exploit code.
Sources
Also known as GHSA-jchm-wvx5-v34w.