CVE-2024-6739 Openfind MailGates and MailAudit - Sensitive Cookie Without 'HttpOnly' Flag
Missing HttpOnly flag on session cookies allows attackers to steal sessions via XSS, leading to account takeover in Openfind MailGates and MailAudit.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6739?
CVE-2024-6739 is a medium-severity vulnerability in Openfind MailAudit, published on 15 Jul 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.
Which versions are affected by CVE-2024-6739?
It affects 2 products.
Products include Openfind Mailaudit, Openfind Mailgates.
How do I fix CVE-2024-6739?
No fix has been published for CVE-2024-6739 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-6739 being exploited?
There is no known exploitation of CVE-2024-6739 in the wild and no public exploit code.
Other vulnerabilities in Openfind MailAudit
Sources
Also known as GHSA-pvxg-5348-rxvf.