CVE-2004-0869

published 2004-09-16

CVE-2004-0869: Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	ie	—	—