CVE-2013-4725

CVE-2013-4725 describes a vulnerability in DDSN Interactive cm3 Acora CMS versions 6.0.6/1a, 6.0.2/1a, and 5.5.7/12b, among others, where an unspecified cookie lacks the secure flag during HTTPS sessions. This oversight allows remote attackers to potentially capture the cookie if it's transmitted over an unencrypted HTTP session, leading to information disclosure (C:P). The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity (AC:L) and no authentication required (Au:N). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.