CVE-2013-7436 describes a vulnerability in noVNC versions prior to 0.5 where the secure flag was not set for cookies in HTTPS sessions. This oversight allows remote attackers to potentially capture these cookies if they are transmitted over an insecure HTTP session. With a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector and medium attack complexity, leading to a potential impact of information disclosure (confidentiality). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.4CPE matchmatch criteria | cpe:2.3:a:kanaka:novnc:0.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.