CVE-2021-40650
First published: Tue Jun 14 2022(Updated: )
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Softwareag Connx | =6.2.0.1269 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-40650?
CVE-2021-40650 is a vulnerability in Connx Version 6.2.0.1269 (20210623) where a cookie can be issued by the application without the secure flag set.
What is the severity level of CVE-2021-40650?
CVE-2021-40650 has a severity level of medium, with a CVSS score of 6.5.
How does CVE-2021-40650 affect Connx Version 6.2.0.1269?
CVE-2021-40650 affects Connx Version 6.2.0.1269 by allowing a cookie to be issued without the secure flag set.
How can I fix the CVE-2021-40650 vulnerability?
To fix the CVE-2021-40650 vulnerability, ensure that the secure flag is set for all cookies issued by the Connx application.
Where can I find more information about CVE-2021-40650?
More information about CVE-2021-40650 can be found on the Connx website or the GitHub repository associated with the vulnerability.
- collector/nvd-index
- vendor/softwareag
- canonical/softwareag connx
- version/softwareag connx/6.2.0.1269